diff --git a/nixos/telperion/configuration.nix b/nixos/telperion/configuration.nix
index 71df91f..dfd589f 100644
--- a/nixos/telperion/configuration.nix
+++ b/nixos/telperion/configuration.nix
@@ -14,8 +14,14 @@
     # Mounts unencrypted sops values at /run/secrets/rndc_keys accessible by root only by default.
     secrets = {
       "rndc_keys" = {
-        owner = config.users.users.named.name;
-        inherit (config.users.users.named) group;
+        "main" = {
+          owner = config.users.users.named.name;
+          inherit (config.users.users.named) group;
+        };
+        "externaldns" = {
+          owner = config.users.users.named.name;
+          inherit (config.users.users.named) group;
+        };
       };
     };
   };