diff --git a/deployments/dns/bind.yaml b/deployments/dns/bind.yaml
index 582ad26..defa798 100644
--- a/deployments/dns/bind.yaml
+++ b/deployments/dns/bind.yaml
@@ -11,6 +11,12 @@ metadata:
   namespace: dns
 data:
   named.conf: |
+    acl "slaves" {
+      10.42.0.0/16;
+    };
+
+    include "/etc/bind/externaldns-key.conf";
+
     options {
         directory "/var/cache/bind";
 
@@ -24,14 +30,9 @@ data:
             10.40.0.254;
         };
 
-        acl "slaves" {
-          10.0.0.0/8;
-        };
-
         allow-transfer { "slaves"; };
 
         dnssec-validation auto;
-        include "/etc/bind/externaldns-key.conf";
     };
 
     zone "." IN {