diff --git a/roles/dns/application/templates/named.conf.options b/roles/dns/application/templates/named.conf.options
index afc42dc..b6e0c49 100644
--- a/roles/dns/application/templates/named.conf.options
+++ b/roles/dns/application/templates/named.conf.options
@@ -2,9 +2,7 @@ options {
     // set main directory
     directory "/var/cache/bind";
     // configure dnssec
-    dnssec-enable yes;
     dnssec-validation yes;
-    dnssec-lookaside auto;
     // etc
     auth-nxdomain no;
     listen-on-v6 { any; };