diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index 420837d..bfb197e 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -112,7 +112,7 @@ policy:
     ksk-submission: submission-{{ zone.name }}
     ksk-shared: {{ knot_dnssec_policy_ksk_shared }}
     propagation-delay: {{ zone.propagation_delay | default(knot_dnssec_policy_propagation_delay) }}
-    cds-cdnskey-publish: {{ knot_dnssec_policy_cds_publish }}
+    cds-cdnskey-publish: {{ zone.cds_cdnskey_publish | default(knot_dnssec_policy_cds_publish) }}
 {% endif %}
 {% endfor %}