diff --git a/roles/dns/master/tasks/main.yml b/roles/dns/master/tasks/main.yml
index d315e13..73f8426 100644
--- a/roles/dns/master/tasks/main.yml
+++ b/roles/dns/master/tasks/main.yml
@@ -13,9 +13,9 @@
   file:
     path: "{{ domain_directory }}"
     state: directory
-    owner: root
+    owner: "{{ dns_user }}"
     group: "{{ dns_user }}"
-    mode: u=rwx,g=rwx,o=
+    mode: u=rwx,g=rx,o=
 
 - name: Create key directory readable for bind
   file: