diff --git a/roles/acme-dnskey-generate/tasks/main.yml b/roles/acme-dnskey-generate/tasks/main.yml
index cf0c7c5..4b66a82 100644
--- a/roles/acme-dnskey-generate/tasks/main.yml
+++ b/roles/acme-dnskey-generate/tasks/main.yml
@@ -17,7 +17,7 @@
   lineinfile:
     path: "/etc/powerdns/updatepolicy.aliases"
     line: 'alias["{{ inventory_hostname }}."]["{{ item }}."] = "{{ item }}."'
-  loop: "{{ acme_dnskey_san_domains }}"
+  loop: "{{ acme_dnskey_san_domains|default([]) }}"
   delegate_to: "{{ acme_dnskey_server }}"
 
 - name: Generate nsupdate.key