diff --git a/pkgs/coredns/default.nix b/pkgs/coredns/default.nix
index 916d11b..c3750a2 100644
--- a/pkgs/coredns/default.nix
+++ b/pkgs/coredns/default.nix
@@ -7,18 +7,20 @@
   installShellFiles,
 }:
 let
-  version = "1.11.1";
+  version = "1.11.3";
 
   externalPlugins = [
     {
       name = "tailscale";
       repo = "github.com/damomurf/coredns-tailscale";
-      version = "750df081a3cc63f325ecfde6c30a974dc0e4bf56";
+      version = "c1a2b9d941edc6f701223d6e31be4edf46c9746f";
     }
   ];
 
-  attrsToPlugins = attrs: builtins.map ({ name, repo, ... }: "${name}:${repo}") attrs;
-  attrsToSources = attrs: builtins.map ({ repo, version, ... }: "${repo}@${version}") attrs;
+  attrsToPlugins =
+    attrs: builtins.map ({ name, repo, ... }: lib.escapeShellArg "${name}:${repo}") attrs;
+  attrsToSources =
+    attrs: builtins.map ({ repo, version, ... }: lib.escapeShellArg "${repo}@${version}") attrs;
 in
 buildGoModule {
   pname = "coredns";
@@ -28,11 +30,12 @@ buildGoModule {
     owner = "coredns";
     repo = "coredns";
     rev = "v${version}";
-    sha256 = "sha256-Mn8hOsODTlnl6PJaevMcyIKkIx/1Lk2HGA7fSSizR20=";
+    # sha256 = lib.fakeSha256;
+    sha256 = "8LZMS1rAqEZ8k1IWSRkQ2O650oqHLP0P31T8oUeE4fw=";
   };
 
   # vendorHash = lib.fakeHash;
-  vendorHash = "sha256-ba8Krc8FVrylsV0n/3JNRTrL3bP8UJRdKF2fy8SYU3o=";
+  vendorHash = "sha256-9oq+oNxOmHuFDIn1hQu7BBb76s615B6Mm3JxqSpEOuI=";
 
   nativeBuildInputs = [ installShellFiles ];