diff --git a/roles/vpn/templates/mobileconfig.j2 b/roles/vpn/templates/mobileconfig.j2
index 8a0bb5f..b48500c 100644
--- a/roles/vpn/templates/mobileconfig.j2
+++ b/roles/vpn/templates/mobileconfig.j2
@@ -12,8 +12,8 @@
                 <integer>1</integer>
               <key>OnDemandRules</key>
               <array>
-{% if algo_ondemand_wifi_exclude != '_null' %}
-{% set WIFI_EXCLUDE_LIST = (algo_ondemand_wifi_exclude|string).split(',') %}
+{% if algo_ondemand_wifi_exclude|b64decode != '_null' %}
+{% set WIFI_EXCLUDE_LIST = (algo_ondemand_wifi_exclude|b64decode|string).split(',') %}
                   <dict>
                       <key>Action</key>
                       <string>Disconnect</string>
diff --git a/server.yml b/server.yml
index b6e8340..f643f4f 100644
--- a/server.yml
+++ b/server.yml
@@ -49,7 +49,7 @@
             algo_server_name: {{ algo_server_name }}
             algo_ondemand_cellular: {{ algo_ondemand_cellular }}
             algo_ondemand_wifi: {{ algo_ondemand_wifi }}
-            algo_ondemand_wifi_exclude: {{ algo_ondemand_wifi_exclude }}
+            algo_ondemand_wifi_exclude: {{ algo_ondemand_wifi_exclude | b64encode }}
             algo_local_dns: {{ algo_local_dns }}
             algo_ssh_tunneling: {{ algo_ssh_tunneling }}
             algo_windows: {{ algo_windows }}