diff --git a/roles/dns/master/defaults/main.yml b/roles/dns/master/defaults/main.yml
index 256cd70..8bebb17 100644
--- a/roles/dns/master/defaults/main.yml
+++ b/roles/dns/master/defaults/main.yml
@@ -11,6 +11,7 @@ dns_list_file: "{{ global_dns_list_directory }}/{{ domain }}"
 
 dnssec_algorithm: "RSASHA512"
 dnssec_key_length: "4096"
+ttl_default: 86400 # TTL for entries where TTL was omitted
 
 # Following domain names are considered absolute
 main_nameserver_domain: "ns1.{{ domain }}"
diff --git a/roles/dns/master/templates/zone.db b/roles/dns/master/templates/zone.db
index 24ca334..f33046c 100644
--- a/roles/dns/master/templates/zone.db
+++ b/roles/dns/master/templates/zone.db
@@ -1,4 +1,4 @@
-$TTL 86400
+$TTL {{ ttl_default }}
 @ IN SOA {{ main_nameserver_domain }}. {{ responsible_mail_name }}. (
   0
   {{ refresh }}