diff --git a/roles/k3s_server/tasks/main.yml b/roles/k3s_server/tasks/main.yml
index 915d93b..5f473a1 100644
--- a/roles/k3s_server/tasks/main.yml
+++ b/roles/k3s_server/tasks/main.yml
@@ -48,7 +48,7 @@
     - name: Add TLS SAN to config if needed
       when:
         - api_endpoint is defined
-        - api_endpoint != ansible_hostname
+        - api_endpoint != ansible_facts['hostname']
         - not (_api_endpoint_in_config | trim | bool)
         - not (_api_endpoint_in_args | trim | bool)
       ansible.builtin.set_fact:
diff --git a/roles/k3s_upgrade/tasks/main.yml b/roles/k3s_upgrade/tasks/main.yml
index a7c6ed2..a42868d 100644
--- a/roles/k3s_upgrade/tasks/main.yml
+++ b/roles/k3s_upgrade/tasks/main.yml
@@ -84,7 +84,7 @@
         - name: Add TLS SAN to config if needed
           when:
             - api_endpoint is defined
-            - api_endpoint != ansible_hostname
+            - api_endpoint != ansible_facts['hostname']
             - not (_api_endpoint_in_config | trim | bool)
             - not (_api_endpoint_in_args | trim | bool)
           ansible.builtin.set_fact: