diff --git a/roles/nsd/tasks/main.yml b/roles/nsd/tasks/main.yml
index b0d3ad6..da21b4f 100644
--- a/roles/nsd/tasks/main.yml
+++ b/roles/nsd/tasks/main.yml
@@ -43,6 +43,7 @@
     mode: "0640"
     owner: root
     group: _nsd
+    validate: "nsd-checkzone '{{ item }}' '%s'"
   tags: dns
   notify: Restart nsd
   with_items: "{{ nsd_zones }}"