diff --git a/library/roles/powerdns-authoritative/templates/pdns.conf b/library/roles/powerdns-authoritative/templates/pdns.conf
index 3e9bc67c..7f1e528a 100644
--- a/library/roles/powerdns-authoritative/templates/pdns.conf
+++ b/library/roles/powerdns-authoritative/templates/pdns.conf
@@ -489,7 +489,9 @@ master={{ powerdns_auth_master | default('no') }}
 #################################
 # retrieval-threads	Number of AXFR-retrieval threads for slave operation
 #
-# retrieval-threads=2
+{% if powerdns_auth_slave is defined and powerdns_auth_slave %}
+retrieval-threads=2
+{% endif %}
 
 #################################
 # reuseport	Enable higher performance on compliant kernels by using SO_REUSEPORT allowing each receiver thread to open its own socket
@@ -524,17 +526,21 @@ setuid=pdns
 #################################
 # slave	Act as a slave
 #
-slave={{ powerdns_auth_slave | default('no') }}
+{% if powerdns_auth_slave is defined and powerdns_auth_slave %}
+slave=yes
 
 #################################
 # slave-cycle-interval	Schedule slave freshness checks once every .. seconds
 #
-# slave-cycle-interval=60
+slave-cycle-interval=60
 
 #################################
 # slave-renotify	If we should send out notifications for slaved updates
 #
 # slave-renotify=no
+{% else %}
+slave=no
+{% endif %}
 
 #################################
 # soa-expire-default	Default SOA expire