diff --git a/app.py b/app.py
index c5ffbf8..ee5ffdf 100644
--- a/app.py
+++ b/app.py
@@ -984,6 +984,9 @@ def _get_hetzner_dns_token() -> str:
     token = _read("HETZNER_DNS_TOKEN")
     if token:
         return token
+    aliases = [value for key, value in _vault_cache.items() if "hetzner" in key.lower() and "dns" in key.lower() and value.strip()]
+    if len(aliases) == 1:
+        return aliases[0].strip()
     rc, _out, err = _ssh(
         "sascha@10.4.1.116",
         "sudo bash /data/stacks/homelab-butler/vault-sync.sh",