diff --git a/roles/bind-authoritative/templates/bind/named.conf.local.j2 b/roles/bind-authoritative/templates/bind/named.conf.local.j2
index 33fd668c..4b689c76 100644
--- a/roles/bind-authoritative/templates/bind/named.conf.local.j2
+++ b/roles/bind-authoritative/templates/bind/named.conf.local.j2
@@ -21,7 +21,7 @@ key "certbot_challenge." {
 // Let's Encrypt Challenge DNS-01 zone
 zone "_acme-challenge.crans.org" {
 	type master;
-	file "bak._acme-challenge.db";
+	file "bak._acme-challenge.crans.org";
 	allow-transfer {
 		{% for ip in slaves_ipv4 -%}
 		{{ ip }};
@@ -31,7 +31,7 @@ zone "_acme-challenge.crans.org" {
 	{% endfor -%}
 	};
 	update-policy {
-		grant certbot_challenge. name _acme-challenge.{{ zone }} txt;
+		grant certbot_challenge. name _acme-challenge.crans.org txt;
 	};
 };