diff --git a/files/2fa/sudo.pam.dev.fedoraproject.org b/files/2fa/sudo.pam.dev.fedoraproject.org.j2
similarity index 100%
rename from files/2fa/sudo.pam.dev.fedoraproject.org
rename to files/2fa/sudo.pam.dev.fedoraproject.org.j2
diff --git a/files/2fa/sudo.pam b/files/2fa/sudo.pam.j2
similarity index 100%
rename from files/2fa/sudo.pam
rename to files/2fa/sudo.pam.j2
diff --git a/tasks/2fa_client.yml b/tasks/2fa_client.yml
index 2aea58c684..38b1741063 100644
--- a/tasks/2fa_client.yml
+++ b/tasks/2fa_client.yml
@@ -32,7 +32,7 @@
   - config
 
 - name: /etc/pam.d/sudo
-  copy: src={{ item }} dest=/etc/pam.d/sudo mode=0644
+  template: src={{ item }} dest=/etc/pam.d/sudo mode=0644
   with_first_found:
   - "{{ files }}/2fa/sudo.pam.{{ inventory_hostname }}"
   - "{{ files }}/2fa/sudo.pam.{{ ansible_domain }}"