diff --git a/README.md b/README.md
index e8f6860..8286aff 100644
--- a/README.md
+++ b/README.md
@@ -39,7 +39,6 @@ The following should be present on the target system
 | matrix_synapse_signing_key_path | "/opt/synapse/ssl/{{ matrix_server_name }}.signing.key" |
 | matrix_synapse_version | "v0.99.1.1" |
 | matrix_synapse_log_days_keep | 30 |
-| matrix_synapse_skip_tls | false |
 | matrix_synapse_registration_secret | _randomly generated_ |
 
 ## Dependencies
diff --git a/tasks/crypto.yml b/tasks/crypto.yml
index 45b1824..1a1039c 100644
--- a/tasks/crypto.yml
+++ b/tasks/crypto.yml
@@ -30,4 +30,4 @@
         owner: synapse
         group: synapse
         mode: "0600"
-  when: not matrix_synapse_skip_tls
+  when: not matrix_synapse_config.no_tls
diff --git a/vars/main.yml b/vars/main.yml
index e8e15ae..eea2d4e 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -9,7 +9,7 @@ matrix_synapse_config:
     port: 80
     bind_addresses: ['::', '0.0.0.0']
     reprovision_threshold: 30
-  no_tls: "{{ matrix_synapse_skip_tls }}" 
+  no_tls: false
   tls_fingerprints: []
   pid_file: "/opt/synapse/synapse.pid"
   soft_file_limit: 0
@@ -20,7 +20,7 @@ matrix_synapse_config:
         - '::'
         - '0.0.0.0'
       type: http
-      tls: "{{ not matrix_synapse_skip_tls }}" 
+      tls: true
       x_forwarded: false
       resources:
         - names: [client]