diff --git a/roles/totpcgi/templates/provisioning.conf.j2 b/roles/totpcgi/templates/provisioning.conf.j2
index ae963bc632..ae2f4e7ddf 100644
--- a/roles/totpcgi/templates/provisioning.conf.j2
+++ b/roles/totpcgi/templates/provisioning.conf.j2
@@ -23,7 +23,7 @@ scratch_tokens_n = 5
 # This identifies the token in the Google Authenticator application. It comes
 # very handy when users have more than one token, so set this to something
 # descriptive of your environment.
-{% if environment == "staging" %}
+{% if env == "staging" %}
 totp_user_mask = $username@stg.fedoraproject.org
 {% else %}
 totp_user_mask = $username@fedoraproject.org