diff --git a/modules/dnsmasq/module.json b/modules/dnsmasq/module.json
index 9cda1c5..58f3050 100644
--- a/modules/dnsmasq/module.json
+++ b/modules/dnsmasq/module.json
@@ -70,6 +70,9 @@
     }
   ],
   "facts": {
-    "node-zones": "/etc/mesh-resolver/nodes.conf"
+    "node-zones": {
+      "path": "/etc/mesh-resolver/nodes.conf",
+      "template": "# Generated by the mesh. Do not edit — this file is replaced whenever a machine\n# joins or leaves, and an edit would survive until then and vanish.\n\nlocal=/{{.Suffix}}/\n{{range .Machines}}address=/{{.FQDN}}/{{.Address}}\n{{end}}"
+    }
   }
 }