diff --git a/playbooks/group_vars/all/nomad_default.yml b/playbooks/group_vars/all/nomad_default.yml
index 38146e8..15233e6 100644
--- a/playbooks/group_vars/all/nomad_default.yml
+++ b/playbooks/group_vars/all/nomad_default.yml
@@ -206,7 +206,7 @@ nomad_acl_configuration: >-
 # internal tls #
 ################
 
-hashistack_default_nomad_enable_tls: false
+hashistack_default_nomad_enable_tls: "{{ enable_tls_internal }}"
 nomad_enable_tls: "{{ hashistack_nomad_enable_tls | default(hashistack_default_nomad_enable_tls) }}"
 
 hashistack_default_nomad_tls_configuration:
diff --git a/playbooks/group_vars/all/vault_default.yml b/playbooks/group_vars/all/vault_default.yml
index 91d1fd5..e743cf8 100644
--- a/playbooks/group_vars/all/vault_default.yml
+++ b/playbooks/group_vars/all/vault_default.yml
@@ -114,7 +114,7 @@ vault_tls_listener_configuration: "{{ hashistack_vault_tls_listener_configuratio
 
 vault_certificates_extra_files_dir: >
   {{
-    [] if external_tls_externally_managed_certs | bool else
+    [] if internal_tls_externally_managed_certs | bool else
     [{
       'src': "{{ hashistack_sub_configuration_directories['certificates'] }}/vault/{{ inventory_hostname }}",
       'dest': "{{ vault_certs_dir }}"