diff --git a/hosts/plover/modules/services/bind.nix b/hosts/plover/modules/services/bind.nix
index 6c855d95..315fd99e 100644
--- a/hosts/plover/modules/services/bind.nix
+++ b/hosts/plover/modules/services/bind.nix
@@ -239,6 +239,8 @@ in
       RuntimeDirectoryMode = "0750";
       CacheDirectory = "named";
       CacheDirectoryMode = "0750";
+      ConfigurationDirectory = "bind";
+      ConfigurationDirectoryMode = "0755";
 
       # Filtering system calls.
       SystemCallFilter = [ "@system-service" ];