diff --git a/hosts/skydick/datapool.nix b/hosts/skydick/datapool.nix
index 94ecf16..efc7eb4 100644
--- a/hosts/skydick/datapool.nix
+++ b/hosts/skydick/datapool.nix
@@ -455,7 +455,9 @@
       # NFSv3 (this bit us 2026-05-14: door-pek's baidunetdisk bind
       # silently wrote to the parent dataset's placeholder instead of
       # the SMB-exposed `files` child).
-      /srv/users/ldx      10.0.0.0/16(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=1000,anongid=100)
+      # ldx: locked to a single client (10.0.75.15 / the matching v6 /128), not the LAN.
+      /srv/users/ldx      10.0.75.15(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=1000,anongid=100)
+      /srv/users/ldx      fd99:23eb:1682::75:15(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=1000,anongid=100)
       /srv/users/ye-lw21  10.0.0.0/16(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=1002,anongid=100)
       /srv/users/zhuyz24  10.0.0.0/16(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=2200000020,anongid=100)
       /srv/users/zhuyz24  2a0c:b641:69c:ada0::/64(rw,sync,no_subtree_check,crossmnt,all_squash,anonuid=2200000020,anongid=100)