diff --git a/.ansible/inventories/production/group_vars/all/config.yaml b/.ansible/inventories/production/group_vars/all/config.yaml
index c6435b7..4f30ed8 100644
--- a/.ansible/inventories/production/group_vars/all/config.yaml
+++ b/.ansible/inventories/production/group_vars/all/config.yaml
@@ -1,5 +1,7 @@
 env: prod
+
 domain: ca.diesel.net
+fingerprint: c4dfdfdece152139fe58280eebaa142ef25b0a19f0984ca5e5338d0d8522f7d8
 
 email: !vault |
   $ANSIBLE_VAULT;1.1;AES256
@@ -9,7 +11,7 @@ email: !vault |
   3735383061643037390a343731373762313638653861323762633662373238303332383861383432
   36343838633735343437316666346437346136323862653935313133643439663230
 
-fingerprint: c4dfdfdece152139fe58280eebaa142ef25b0a19f0984ca5e5338d0d8522f7d8
+
 password: !vault |
   $ANSIBLE_VAULT;1.1;AES256
   64386334383831346436646566323666626165323336643161646234323066323031646165343934
diff --git a/.ansible/templates/defaults.json.j2 b/.ansible/templates/defaults.json.j2
index c896b84..945ed17 100644
--- a/.ansible/templates/defaults.json.j2
+++ b/.ansible/templates/defaults.json.j2
@@ -1,6 +1,6 @@
 {
    "ca-url": "https://{{ domain }}",
    "ca-config": "/home/step/config/ca.json",
-   "fingerprint": "c4dfdfdece152139fe58280eebaa142ef25b0a19f0984ca5e5338d0d8522f7d8",
+   "fingerprint": "{{ fingerprint }}",
    "root": "/home/step/certs/root_ca.crt"
 }