diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index bc30f40..e99823a 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -48,7 +48,7 @@ remote:
 {% endfor %}
 
 acl:
-{% for remote in (zones | map(attribute='replicas') ) + (zones | map(attribute='replicate') | map(attribute=inventory_hostname) | default([]) ) | flatten | unique %}
+{% for remote in (zones | map(attribute='replicas') ) + (zones | map(attribute='replicate', default={}) | map(attribute=inventory_hostname, default=[]) ) | flatten | unique %}
 
   - id: acl-xfr-{{ remote }}
     action: transfer