diff --git a/roles/base/tasks/system_setup/cron.yml b/roles/base/tasks/system_setup/cron.yml
index c2125d3..829014d 100644
--- a/roles/base/tasks/system_setup/cron.yml
+++ b/roles/base/tasks/system_setup/cron.yml
@@ -54,7 +54,8 @@
   become_user: root
   cron:
     name: "generate SSH key on reboot, if missing"
-    job: "KEYS=(/etc/ssh/ssh_host_*_key); (( \${#KEYS[@]} )) || ( ssh-keygen -A && systemctl restart '{{ ssh_service }}' )"
+    job: >-
+      {% raw %}KEYS=(/etc/ssh/ssh_host_*_key); (( ${#KEYS[@]} )) || ( ssh-keygen -A && systemctl restart {% endraw %}{{ ssh_service }}{% raw %} ){% endraw %}
     state: present
     special_time: reboot