diff --git a/galaxy.yml b/galaxy.yml
index 31ac599..79f47d2 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -7,7 +7,7 @@ namespace: s3lph
 name: nameserver
 
 # The version of the collection. Must be compatible with semantic versioning
-version: "0.3.3"
+version: "0.3.4"
 
 # The path to the Markdown (.md) readme file. This path is relative to the root of the collection
 readme: README.md
diff --git a/roles/knot/defaults/main.yml b/roles/knot/defaults/main.yml
index 5b17cce..1278fa2 100644
--- a/roles/knot/defaults/main.yml
+++ b/roles/knot/defaults/main.yml
@@ -30,7 +30,8 @@ knot_dnssec_policy_ksk_size: 256
 knot_dnssec_policy_zsk_size: 256
 knot_dnssec_policy_zsk_lifetime: 30d
 knot_dnssec_policy_ksk_lifetime: 0
-knot_dnssec_policy_cds_publish: 'double-ds'
+# double-ds breaks algorithm rollovers: https://gitlab.nic.cz/knot/knot-dns/-/issues/804
+knot_dnssec_policy_cds_publish: 'always'
 knot_dnssec_policy_propagation_delay: 1h
 
 knot_dnssec_submission_check_interval: 1h