diff --git a/site/roles/manifests/infra/dns/authoritive.pp b/site/roles/manifests/infra/dns/authoritive.pp
new file mode 100644
index 0000000..ab81813
--- /dev/null
+++ b/site/roles/manifests/infra/dns/authoritive.pp
@@ -0,0 +1,7 @@
+# roles::infra::dns::authoritive
+# defines a dns server with master-only zones
+#
+class roles::infra::dns::authoritive {
+    include profiles::defaults
+    include profiles::base
+}
diff --git a/site/roles/manifests/infra/dns/resolver.pp b/site/roles/manifests/infra/dns/resolver.pp
new file mode 100644
index 0000000..1bf97ab
--- /dev/null
+++ b/site/roles/manifests/infra/dns/resolver.pp
@@ -0,0 +1,7 @@
+# roles::infra::dns::resolver
+# defines a dns server with forward-only zones
+#
+class roles::infra::dns::resolver {
+    include profiles::defaults
+    include profiles::base
+}