diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index 7bdc712..59873b1 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -38,7 +38,7 @@ remote:
 {% for remote in ( (zones | map(attribute='replicas') ) + (zones | map(attribute='masters') ) ) | flatten | unique %}
 
   - id: remote-{{ remote }}
-{% if knot_tsig_key is defined and 'knot_tsig_key' in hostvars[remote %}
+{% if knot_tsig_key is defined and 'knot_tsig_key' in hostvars[remote] %}
 {# only use TSIG mutually, i.e. if both parties have a key #}
     key: {{ knot_tsig_key.name }}
 {% endif %}