diff --git a/roles/knot/templates/etc/knot/knot.conf.j2 b/roles/knot/templates/etc/knot/knot.conf.j2
index dec9cc6..3bc8afb 100644
--- a/roles/knot/templates/etc/knot/knot.conf.j2
+++ b/roles/knot/templates/etc/knot/knot.conf.j2
@@ -48,7 +48,7 @@ remote:
 {% endfor %}
 
 acl:
-{% for remote in (zones | map(attribute='replicas') ) + (zones | map(attribute='replicate', default={}) | map(attribute=inventory_hostname, default=[]) ) | flatten | unique %}
+{% for remote in (zones | map(attribute='replicas') ) + (zones | map(attribute='replicate', default={}) | map(attribute=inventory_hostname, default=[]) | flatten ) | flatten | unique %}
 
   - id: acl-xfr-{{ remote }}
     action: transfer