diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index 49449e5..240053d 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -86,6 +86,7 @@ acl:
 
 submission:
 {% for zone in zones %}
+{% if inventory_hostname in zone.masters %}
 
   - id: submission-{{ zone.name }}
     check-interval: {{ knot_dnssec_submission_check_interval }}
@@ -93,6 +94,8 @@ submission:
 {% if zone.parents is defined and zone.parents | length > 0 %}
     parent:{% for parent in zone.parents %} {{ parent }}{% endfor %}
 {% endif %}
+
+{ %endif %}
 {% endfor %}
 
 policy: