diff --git a/roles/pdns-api/templates/pdns_api.conf.j2 b/roles/pdns-api/templates/pdns_api.conf.j2
index 57e717e..072d0af 100644
--- a/roles/pdns-api/templates/pdns_api.conf.j2
+++ b/roles/pdns-api/templates/pdns_api.conf.j2
@@ -18,9 +18,11 @@ server {
 
     location / {
         # allow defined addresses to access
-        {% for host in pdns_limit_api_access %}
+        allow   127.0.0.0/8;
+        allow   ::1/128;
+{% for host in pdns_limit_api_access %}
         allow   {{ host }};
-        {% endfor %}
+{% endfor %}
         # drop rest of the world
         deny    all;