diff --git a/playbook.yml b/playbook.yml
index 3e3449a121b1244b71778258db7142e22f7601dd..49ab3ca3fbba685cf932d05c13c686c756eccfda 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -18,4 +18,6 @@
   become: yes
   roles:
     - services
-    - ffhl_nameserver
+    - role: ffhl_nameserver
+      tags: [nameserver]
+    
diff --git a/roles/ffhl_nameserver/files/dnsdist/dnsdist.conf b/roles/ffhl_nameserver/files/dnsdist/dnsdist.conf
index 0801c87db048c8e33cb670940279f064f612563f..ecbee8a007ee203da8b3436296bf0755018a5d4e 100644
--- a/roles/ffhl_nameserver/files/dnsdist/dnsdist.conf
+++ b/roles/ffhl_nameserver/files/dnsdist/dnsdist.conf
@@ -22,7 +22,7 @@ recursive_ips:addMask('::1/128')
 
 addAction("ffdyn.net.", PoolAction('ffdyndns'))
 addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))
-addAction({"luebeck.freifunk.net.", "ffhl.de.", "ffhl."}, PoolAction('auth'))
+addAction(AllRule(), PoolAction('auth'))
 
 -- disable security status
 setSecurityPollSuffix("")