diff --git a/terraform/vault/approle.tf b/terraform/vault/approle.tf
index f262f49..451b823 100644
--- a/terraform/vault/approle.tf
+++ b/terraform/vault/approle.tf
@@ -90,6 +90,19 @@ locals {
     }
 
     # Wave 3: DNS servers
+    "ns1" = {
+      paths = [
+        "secret/data/hosts/ns1/*",
+        "secret/data/shared/dns/*",
+      ]
+    }
+
+    "ns2" = {
+      paths = [
+        "secret/data/hosts/ns2/*",
+        "secret/data/shared/dns/*",
+      ]
+    }
 
     # Wave 4: http-proxy
     "http-proxy" = {