diff --git a/playbooks/renovate/run.yaml b/playbooks/renovate/run.yaml
index 14781a2..58b235c 100644
--- a/playbooks/renovate/run.yaml
+++ b/playbooks/renovate/run.yaml
@@ -8,11 +8,11 @@
         RENOVATE_GIT_AUTHOR: "Renovatebot <renovatebot@vexxhost.dev>"
         # Common
         GITHUB_COM_TOKEN: "{{ renovate.github_token }}"
-        RENOVATE_ENDPOINT: "https://{{ zuul.project.canonical_hostname == 'github.com' | ternary('api.github.com', 'review.vexxhost.dev') }}"
-        RENOVATE_PLATFORM: "{{ zuul.project.canonical_hostname == 'github.com' | ternary('github', 'gerrit') }}"
+        RENOVATE_ENDPOINT: "https://{{ (zuul.project.canonical_hostname == 'github.com') | ternary('api.github.com', 'review.vexxhost.dev') }}"
+        RENOVATE_PLATFORM: "{{ (zuul.project.canonical_hostname == 'github.com') | ternary('github', 'gerrit') }}"
         RENOVATE_ALLOWED_COMMANDS: '["^curl"]'
         # GitHub
-        RENOVATE_TOKEN: "{{ zuul.project.canonical_hostname == 'github.com' | ternary(renovate.github_token, omit) }}"
+        RENOVATE_TOKEN: "{{ (zuul.project.canonical_hostname == 'github.com') | ternary(renovate.github_token, omit) }}"
         # Gerrit
-        RENOVATE_USERNAME: "{{ zuul.project.canonical_hostname != 'github.com' | ternary(renovate.gerrit_username, omit) }}"
-        RENOVATE_PASSWORD: "{{ zuul.project.canonical_hostname != 'github.com' | ternary(renovate.gerrit_password, omit) }}"
+        RENOVATE_USERNAME: "{{ (zuul.project.canonical_hostname != 'github.com') | ternary(renovate.gerrit_username, omit) }}"
+        RENOVATE_PASSWORD: "{{ (zuul.project.canonical_hostname != 'github.com') | ternary(renovate.gerrit_password, omit) }}"