diff --git a/roles/backup/files/config/endor_excludes.txt b/roles/backup/files/config/endor_excludes.txt
new file mode 100644
index 0000000..e69de29
diff --git a/roles/backup/files/config/endor_includes.txt b/roles/backup/files/config/endor_includes.txt
new file mode 100644
index 0000000..e69de29
diff --git a/roles/nameserver/tasks/install_powerdns_server.yml b/roles/nameserver/tasks/install_powerdns_server.yml
index c72a267..50fb5bf 100644
--- a/roles/nameserver/tasks/install_powerdns_server.yml
+++ b/roles/nameserver/tasks/install_powerdns_server.yml
@@ -101,16 +101,14 @@
     mode: "0644"
     owner: "root"
     group: "root"
-    force: no
+    force: yes
 
 - name: Nameserver | powerdns-server | set listening IPs
   when:
     - powerdns_secondary is defined
     - powerdns_secondary is true
-    - powerdns_recursor is defined
-    - powerdns_recursor is true
   template:
-    src: "powerdns-server-sec-mysql-config.j2"
+    src: "powerdns-server-sec-config.j2"
     dest: "/etc/powerdns/pdns.conf"
     owner: "root"
     group: "root"
diff --git a/roles/nameserver/templates/powerdns-server-sec-config.j2 b/roles/nameserver/templates/powerdns-server-sec-config.j2
new file mode 100644
index 0000000..61873ba
--- /dev/null
+++ b/roles/nameserver/templates/powerdns-server-sec-config.j2
@@ -0,0 +1,4 @@
+include-dir=/etc/powerdns/pdns.d
+launch=
+local-address={{ ansible_default_ipv4.address }}, [{{ ansible_default_ipv6.address }}], 127.0.0.1:553{% if wg_local_ip is defined %}, {{ wg_local_ip | ansible.utils.ipaddr('address') }}:553{% endif %}
+security-poll-suffix=
\ No newline at end of file
diff --git a/roles/nameserver/templates/powerdns-server-sec-mysql-config .j2 b/roles/nameserver/templates/powerdns-server-sec-mysql-config .j2
deleted file mode 100644
index 863ac7b..0000000
--- a/roles/nameserver/templates/powerdns-server-sec-mysql-config .j2	
+++ /dev/null
@@ -1,4 +0,0 @@
-launch += gmysql
-gmysql-host = {{ pdns_pri_server }}
-gmysql-password = {{ pdns_db_passwd | default(lookup('password', '/etc/powerdns/pdns.d/.mysqlpw length=20')) }}
-gmysql-dnssec = Yes
diff --git a/roles/nameserver/templates/powerdns-server-sec-mysql-config.j2 b/roles/nameserver/templates/powerdns-server-sec-mysql-config.j2
index 61873ba..863ac7b 100644
--- a/roles/nameserver/templates/powerdns-server-sec-mysql-config.j2
+++ b/roles/nameserver/templates/powerdns-server-sec-mysql-config.j2
@@ -1,4 +1,4 @@
-include-dir=/etc/powerdns/pdns.d
-launch=
-local-address={{ ansible_default_ipv4.address }}, [{{ ansible_default_ipv6.address }}], 127.0.0.1:553{% if wg_local_ip is defined %}, {{ wg_local_ip | ansible.utils.ipaddr('address') }}:553{% endif %}
-security-poll-suffix=
\ No newline at end of file
+launch += gmysql
+gmysql-host = {{ pdns_pri_server }}
+gmysql-password = {{ pdns_db_passwd | default(lookup('password', '/etc/powerdns/pdns.d/.mysqlpw length=20')) }}
+gmysql-dnssec = Yes