diff --git a/bootstrap/templates/kubernetes/k0s/k0sctl.yaml.j2 b/bootstrap/templates/kubernetes/k0s/k0sctl.yaml.j2
index ceebefc6..dc4fe076 100644
--- a/bootstrap/templates/kubernetes/k0s/k0sctl.yaml.j2
+++ b/bootstrap/templates/kubernetes/k0s/k0sctl.yaml.j2
@@ -26,7 +26,7 @@ spec:
       #% endif %#
       #% if loop.first %#
       hooks: &hooks
-        #% if item.role | default('') == 'controller+worker' %#
+        #% if item.role | default('') != 'controller' %#
         apply:
           before:
             - sudo mv ~/unprivileged-ports.toml /etc/k0s/containerd.d/unprivileged-ports.toml