diff --git a/roles/web-app-bluesky/tasks/01_core.yml b/roles/web-app-bluesky/tasks/01_core.yml
index 0d12c4e9..152b4bab 100644
--- a/roles/web-app-bluesky/tasks/01_core.yml
+++ b/roles/web-app-bluesky/tasks/01_core.yml
@@ -54,7 +54,7 @@
   vars:
     load_app_id:                        "web-opt-rdr-domains"
     redirect_domain_mappings:           "{{ BLUESKY_REDIRECT_DOMAIN_MAPPINGS }}"
-    web_opt_rdr_domains_logout_enabled:: true
+    web_opt_rdr_domains_logout_enabled: true
 
 - name: "Flush handlers for '{{ role_name }}'"
   meta: flush_handlers
\ No newline at end of file
diff --git a/roles/web-opt-rdr-domains/defaults/main.yml b/roles/web-opt-rdr-domains/defaults/main.yml
index e83695f6..8f69d8dd 100644
--- a/roles/web-opt-rdr-domains/defaults/main.yml
+++ b/roles/web-opt-rdr-domains/defaults/main.yml
@@ -1,2 +1,2 @@
 redirect_domain_mappings:             []      # Format [{source: target:},...]
-web_opt_rdr_domains_logout_enabled::  false   # Activate headers for logout
\ No newline at end of file
+web_opt_rdr_domains_logout_enabled:  false   # Activate headers for logout
\ No newline at end of file
diff --git a/roles/web-opt-rdr-domains/templates/redirect-domain.conf.j2 b/roles/web-opt-rdr-domains/templates/redirect-domain.conf.j2
index edec4ab8..7fcbd3b7 100644
--- a/roles/web-opt-rdr-domains/templates/redirect-domain.conf.j2
+++ b/roles/web-opt-rdr-domains/templates/redirect-domain.conf.j2
@@ -4,7 +4,7 @@ server {
   server_name {{ domain }};
   {% include 'roles/sys-svc-letsencrypt/templates/ssl_header.j2' %}
 
-  {% if web_opt_rdr_domains_logout_enabled: | bool %}
+  {% if web_opt_rdr_domains_logout_enabled | bool %}
   {# 
     Required for edge cases e.g. BlueSky where a canonical domain is deactivated,
     and set as an alias but interpretated as an logout domain