diff --git a/apt/defaults/main.yml b/apt/defaults/main.yml
index 8194ece7fb21366c2170421ec5ed743dc6f2c39a..0652621a2a0a54c983cc36c818024170389bf719 100644
--- a/apt/defaults/main.yml
+++ b/apt/defaults/main.yml
@@ -7,3 +7,6 @@ apt_repos: ['main', 'contrib', 'non-free']
 apt_sets: ['', '-updates']  # ['-backports', '-proposed-updates']
 apt_src_enable: true
 raspbian_has_no_security: false
+apt_configs:
+  - 50debconf-exec-tmp
+  - 51apt-sandbox
diff --git a/apt/tasks/main.yml b/apt/tasks/main.yml
index 2b1e468a0ae7a445dd14f3a2245d88ac61687615..5b45d669f52e9705836c6496b696b3321ace91b8 100644
--- a/apt/tasks/main.yml
+++ b/apt/tasks/main.yml
@@ -31,9 +31,7 @@
     owner: root
     group: root
     mode: '0644'
-  with_items:
-    - 50debconf-exec-tmp
-    - 51apt-sandbox
+  loop: "{{ apt_configs }}"
   tags:
     - config
     - apt