diff --git a/roles/master/tasks/config.yml b/roles/master/tasks/config.yml
index 16f4826..9f44d5d 100644
--- a/roles/master/tasks/config.yml
+++ b/roles/master/tasks/config.yml
@@ -32,6 +32,7 @@
     owner: knot
     group: knot
     mode: 0640
+    validate: /usr/bin/kzonecheck -v %s
   vars:
     zone: "{{ hostvars[inventory_hostname]['knot_zone_' + item.1] }}"
   loop: "{{ knot_zone_groups | subelements('zones') }}"