diff --git a/nixos/modules/services/networking/knot.nix b/nixos/modules/services/networking/knot.nix
index 46634c5df494..a9a6b2800d88 100644
--- a/nixos/modules/services/networking/knot.nix
+++ b/nixos/modules/services/networking/knot.nix
@@ -61,6 +61,7 @@ let
           "remotes"
           "acl"
           "submission"
+          "dnskey-sync"
           "policy"
           "template"
           "zone"
@@ -101,6 +102,7 @@ let
             "remotes"
             "acl"
             "submission"
+            "dnskey-sync"
             "policy"
             "external"
           ]