diff --git a/infrastructure/roles/acme/tasks/main.yml b/infrastructure/roles/acme/tasks/main.yml
index 6593553..cd255ec 100644
--- a/infrastructure/roles/acme/tasks/main.yml
+++ b/infrastructure/roles/acme/tasks/main.yml
@@ -94,7 +94,7 @@
     -d {{ item.domain }}
     --home {{ acme_install_dir }}
     --fullchain-file {{ (item.install | selectattr('src', 'equalto', 'fullchain.cer') | first).dest }}
-    --key-file {{ (item.install | selectattr('src', 'match', '.*\\.key$') | first).dest }}
+    --key-file {{ (item.install | rejectattr('src', 'equalto', 'fullchain.cer') | first).dest }}
   loop: "{{ acme_certs }}"
   notify: reload prole ssl consumers