diff --git a/playbooks/groups/dns.yml b/playbooks/groups/dns.yml
index f8b96f5877..e0242e0501 100644
--- a/playbooks/groups/dns.yml
+++ b/playbooks/groups/dns.yml
@@ -22,7 +22,8 @@
   - collectd/bind
   - rsyncd
   - sudo
-  - { role: openvpn/client, when: datacenter not in ["phx2", "rdu2"] }
+  - { role: openvpn/client,
+      when: datacenter != "phx2" and datacenter != "rdu2" }
   - dns
 
   tasks: