diff --git a/tasks/configuration.yml b/tasks/configuration.yml
index 2af0cf9..29d5b4b 100644
--- a/tasks/configuration.yml
+++ b/tasks/configuration.yml
@@ -18,7 +18,7 @@
   # Most of our apache2 instances are currently running behind public reverse proxies.
   # Thus, they do not offer HTTPS and do not need DH parameters.
   # The only possible exceptions are external hosts (e.g. orwell).
-  when: "'extern_hosts' in group_names"
+  when: apache.is_proxy is defined and apache.is_proxy
 
 - name: "Configuration | Copy misc configuration files"
   ansible.builtin.copy:
@@ -44,7 +44,7 @@
     name: "{{ item }}"
     state: present
   notify: reload apache2
-  when: "'extern_hosts' in group_names"
+  when: apache.is_proxy is defined and apache.is_proxy
   loop:
     - headers
     - mpm_event
@@ -55,7 +55,7 @@
     cmd: "a2enconf {{ item }}"
     creates: "/etc/apache2/conf-enabled/{{ item }}"
   notify: reload apache2
-  when: "'extern_hosts' in group_names"
+  when: apache.is_proxy is defined and apache.is_proxy
   loop:
     - add-headers.conf
     - letsencrypt.conf