diff --git a/hosts/bind/default.nix b/hosts/bind/default.nix
index e4263f8c..a1a06fb3 100644
--- a/hosts/bind/default.nix
+++ b/hosts/bind/default.nix
@@ -9,6 +9,7 @@ let
       ${bind}/sbin/rndc -k /etc/bind/rndc.key $@
     }
 
+    chmod a+rwx /var/lib/c3d2-dns/zones
     rndc freeze
     rndc reload
     rndc thaw