diff --git a/dns/dns-master.yml b/dns/dns-master.yml
new file mode 100644
index 0000000..e1e4301
--- /dev/null
+++ b/dns/dns-master.yml
@@ -0,0 +1,14 @@
+---
+- user: root
+  host: dns-master
+  gather_facts: no
+  tasks:
+  - name: update dns-infrastructure git repo
+    git: repo=git@bitbucket.org:staticsafe/dns-infrastructure.git dest=/etc/namedb/dns-infrastructure update=yes
+  - name: ensure permission correctness
+    shell: chown -R bind:bind /etc/namedb/dns-infrastructure
+    notify:
+    - reload nameserver daemon
+  handlers:
+    - name: reload nameserver daemon
+      action: shell service named reload