diff --git a/roles/nginx-proxy/tasks/generate_certs.yml b/roles/nginx-proxy/tasks/generate_certs.yml
index 35abf8c..d1e96b3 100644
--- a/roles/nginx-proxy/tasks/generate_certs.yml
+++ b/roles/nginx-proxy/tasks/generate_certs.yml
@@ -16,7 +16,7 @@
   loop: "{{ servernames | dict2items }}"
   when: not item.value.internal
   args:
-    creates: "/etc/letsencrypt/live/{{ item.key + "." + mydomain if not item.value.internal else item.key + ".internal." + mydomain }}/fullchain.pem"
+    creates: "/etc/letsencrypt/live/{{ (item.key + "." + mydomain) if not item.value.internal else (item.key + ".internal." + mydomain) }}/fullchain.pem"
 
 - name: Start Nginx after Certbot
   ansible.builtin.service: