diff --git a/roles/knot/templates/knot.conf.j2 b/roles/knot/templates/knot.conf.j2
index bccadb9..5fbe0f8 100644
--- a/roles/knot/templates/knot.conf.j2
+++ b/roles/knot/templates/knot.conf.j2
@@ -35,9 +35,11 @@ template:
     journal-content: all
     dnssec-signing: on
     dnssec-policy: default
+{% if groups.secondary %}
     notify: [ {{ groups.secondary | map('extract', hostvars) | map(attribute='ansible_hostname') | join(', ') }} ]
     acl: [ {{ groups.secondary | map('extract', hostvars) | map(attribute='ansible_hostname') | join(', ') }} ]
 {% endif %}
+{% endif %}
 
 {% if inventory_hostname in groups.secondary %}
     master: [ {{ groups.primary | map('extract', hostvars) | map(attribute='ansible_hostname') | join(', ') }} ]