diff --git a/inventories/chaosknoten/host_vars/auth-dns.yaml b/inventories/chaosknoten/host_vars/auth-dns.yaml
index 2fa8f91..007ff0e 100644
--- a/inventories/chaosknoten/host_vars/auth-dns.yaml
+++ b/inventories/chaosknoten/host_vars/auth-dns.yaml
@@ -38,26 +38,3 @@ knot__zones:
     notify_targets: [ "ns-intern.hamburg.ccc.de" ]
     content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/eh22.easterhegg.eu.zone') }}"
 
-  - domain: "3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
-
-  - domain: "2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
-
-  - domain: "3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
-
-  - domain: "4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
-
-  - domain: "5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
-
-  - domain: "6.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa."
-    notify_targets: [ "ns-intern.hamburg.ccc.de" ]
-    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/auth-dns/zones/6.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone') }}"
diff --git a/resources/chaosknoten/auth-dns/zones/17.31.172.in-addr.arpa.zone b/resources/chaosknoten/auth-dns/zones/17.31.172.in-addr.arpa.zone
index dd13af3..ea2c1ce 100644
--- a/resources/chaosknoten/auth-dns/zones/17.31.172.in-addr.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/17.31.172.in-addr.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns-intern.hamburg.ccc.de. haegar.ccc.de. (
 		2025020101
 		10800
 		3600
diff --git a/resources/chaosknoten/auth-dns/zones/2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone b/resources/chaosknoten/auth-dns/zones/2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
index d7e02c3..205bda5 100644
--- a/resources/chaosknoten/auth-dns/zones/2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/2.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns.hamburg.ccc.de. haegar.ccc.de. (
                 2023073001
                 10800
                 3600
diff --git a/resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone b/resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone
index 59fc28f..240d783 100644
--- a/resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/3.2.0.0.0.0.0.f.0.b.4.1.0.0.a.2.ip6.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns.hamburg.ccc.de. haegar.ccc.de. (
                 2025020102
                 10800
                 3600
diff --git a/resources/chaosknoten/auth-dns/zones/3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone b/resources/chaosknoten/auth-dns/zones/3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
index a14e026..3b3921c 100644
--- a/resources/chaosknoten/auth-dns/zones/3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/3.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns.hamburg.ccc.de. haegar.ccc.de. (
                 2023072900
                 10800
                 3600
diff --git a/resources/chaosknoten/auth-dns/zones/4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone b/resources/chaosknoten/auth-dns/zones/4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
index 1a8fb86..4bba9bc 100644
--- a/resources/chaosknoten/auth-dns/zones/4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/4.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns.hamburg.ccc.de. haegar.ccc.de. (
                 2023072900
                 10800
                 3600
diff --git a/resources/chaosknoten/auth-dns/zones/5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone b/resources/chaosknoten/auth-dns/zones/5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
index d46cc3c..8eeaf64 100644
--- a/resources/chaosknoten/auth-dns/zones/5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
+++ b/resources/chaosknoten/auth-dns/zones/5.2.1.0.0.0.0.3.0.0.2.4.0.b.4.1.0.0.a.2.ip6.arpa.zone
@@ -1,6 +1,6 @@
 $TTL 7200
 
-@               IN      SOA     auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
+@               IN      SOA     ns.hamburg.ccc.de. haegar.ccc.de. (
                 2023072900
                 10800
                 3600
diff --git a/roles/knot/handlers/main.yaml b/roles/knot/handlers/main.yaml
index f89fedd..11944a0 100644
--- a/roles/knot/handlers/main.yaml
+++ b/roles/knot/handlers/main.yaml
@@ -1,10 +1,16 @@
 ---
-- name: reload knot
+- name: restart knot
   tags: [ auth-dns ]
   become: true
   ansible.builtin.systemd:
     name: knot.service
-    state: reloaded
+    state: restarted
+
+- name: reload knot zones
+  tags: [ auth-dns ]
+  become: true
+  changed_when: true
+  ansible.builtin.command: "knotc zone-reload"
 
 - name: netplan apply
   tags: [ auth-dns ]
diff --git a/roles/knot/tasks/02-configure.yaml b/roles/knot/tasks/02-configure.yaml
index 2b0b0fa..12b5732 100644
--- a/roles/knot/tasks/02-configure.yaml
+++ b/roles/knot/tasks/02-configure.yaml
@@ -13,7 +13,7 @@
 - name: Deploy knot configuration file
   tags: [ auth-dns ]
   become: true
-  notify: reload knot
+  notify: restart knot
   ansible.builtin.template:
     src: knot.conf.j2
     dest: /etc/knot/knot.conf
@@ -24,7 +24,7 @@
 - name: Deploy configured zones
   tags: [ auth-dns ]
   become: true
-  notify: reload knot
+  notify: reload knot zones
   loop: "{{ knot__zones }}"
   loop_control:
     label: "{{ item.domain }}"