diff --git a/global/overlay/etc/puppet/modules/dns/manifests/knotdns.pp b/global/overlay/etc/puppet/modules/dns/manifests/knotdns.pp
index 43b6895..a66355b 100644
--- a/global/overlay/etc/puppet/modules/dns/manifests/knotdns.pp
+++ b/global/overlay/etc/puppet/modules/dns/manifests/knotdns.pp
@@ -65,6 +65,12 @@ class dns::knotdns(
        owner   => 'knot',
        group   => 'knot',
     }
+    file { '/var/lib/knot/zones/*':
+       ensure => files,
+       mode    => '0750',
+       owner   => 'knot',
+       group   => 'knot',
+    }
     file { '/etc/knot/conf.d/*.conf':
        ensure  => file,
        owner   => 'knot',