diff --git a/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml b/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml
index 1ffdeed..254a61c 100644
--- a/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml
@@ -143,14 +143,15 @@
 - name: Inject step-ca certificate into traefik container
   ansible.builtin.blockinfile:
     path: /var/lib/rancher/k3s/server/manifests/traefik-config.yaml
-    block: |
-      volumes:
-        - name: step-certificates-certs
-          mountPath: /step-ca
-          type: configMap
-      env:
-        - name: LEGO_CA_CERTIFICATES
-          value: /step-ca/root_ca.crt
+    block: |2
+          volumes:
+            - name: step-certificates-certs
+              mountPath: /step-ca
+              type: configMap
+          env:
+            - name: LEGO_CA_CERTIFICATES
+              value: /step-ca/root_ca.crt
+    marker: '    # {mark} ANSIBLE MANAGED BLOCK'
   notify:
     - Apply manifests