diff --git a/bin/sync-unified-master b/bin/sync-unified-master
old mode 100644
new mode 100755
index 65985bb..79fc23a
--- a/bin/sync-unified-master
+++ b/bin/sync-unified-master
@@ -10,7 +10,7 @@ use Martnet::DDNS;
 
 # Hidden-master unified include generator.
 #
-# - Generates /var/lib/bind/unified.zones.9
+# - Generates /etc/bind/unified.zones.9
 # - Creates missing zonefiles for any emitted zones (minimal skeleton)
 # - Deterministic output; only rewrites include file if content changes
 #
@@ -19,7 +19,7 @@ use Martnet::DDNS;
 # - Does NOT attempt to infer DNSSEC (you are removing _dnssec entirely).
 # - Filters out private.invalid (core static config) and _pureslave (slave-only).
 
-my $out          = '/var/lib/bind/unified.zones.9';
+my $out          = '/etc/bind/unified.zones.9';
 my $self_master  = undef;   # if unset, uses $ddns->default_master()
 my $force_zf     = 0;       # overwrite existing zonefiles too
 my $force_out    = 0;       # rewrite unified include even if identical