diff --git a/bundles/powerdns/files/pdns.conf b/bundles/powerdns/files/pdns.conf
index 872507f..afbf7e0 100644
--- a/bundles/powerdns/files/pdns.conf
+++ b/bundles/powerdns/files/pdns.conf
@@ -25,5 +25,7 @@ api-key=${api_key}
 webserver=yes
 
 allow-notify-from=
+
 master=yes
+allow-axfr-ips=${','.join(sorted(my_secondary_servers))}
 % endif
diff --git a/bundles/powerdns/items.py b/bundles/powerdns/items.py
index fef1d6e..ca83a38 100644
--- a/bundles/powerdns/items.py
+++ b/bundles/powerdns/items.py
@@ -54,6 +54,7 @@ files = {
             'my_hostname': node.metadata['powerdns'].get('my_hostname', node.name),
             'is_secondary': node.metadata['powerdns'].get('is_secondary', False),
             'my_primary_servers': node.metadata['powerdns'].get('my_primary_servers', {}),
+            'my_secondary_servers': node.metadata['powerdns'].get('my_secondary_servers', {}),
         },
         'needs': {
             'pkg_apt:pdns-server',