diff --git a/apps/asterisk/deployment.yaml b/apps/asterisk/deployment.yaml
index e50b24b..2598f57 100644
--- a/apps/asterisk/deployment.yaml
+++ b/apps/asterisk/deployment.yaml
@@ -23,6 +23,15 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       securityContext:
         fsGroup: 0
+      # CoreDNS in this cluster has an iamworkin.lan wildcard that catches
+      # any unresolved name and returns 10.0.56.200 (Traefik VIP), which
+      # means downloads.asterisk.org inside the pod resolves to Traefik and
+      # returns 404. Pin the real address so the init container can fetch
+      # the sounds tarball.
+      hostAliases:
+        - ip: 165.22.184.19
+          hostnames:
+            - downloads.asterisk.org
       initContainers:
         - name: install-sounds
           # Downloads Asterisk core sounds (en, ulaw) into the sounds emptyDir