diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5fa12446..bc73a31a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ The **patch** part changes incrementally at each release.
 * packweb-apache: Don't turn on mod-evasive emails by default
 * haproxy: chroot and socket path are configurable
 * redis: create sudoers file if missing
+* redis: new syntax for match filter
 
 ### Fixed
 
diff --git a/redis/templates/redis-server@stretch.service.j2 b/redis/templates/redis-server@stretch.service.j2
index ea29da5e..3f14a296 100644
--- a/redis/templates/redis-server@stretch.service.j2
+++ b/redis/templates/redis-server@stretch.service.j2
@@ -22,7 +22,7 @@ UMask=007
 PrivateTmp=yes
 LimitNOFILE=65535
 PrivateDevices=yes
-ProtectHome={{ redis_data_dir_prefix | match('/home') | ternary('no', 'yes') }}
+ProtectHome={{ redis_data_dir_prefix is match('/home') | ternary('no', 'yes') }}
 ReadOnlyDirectories=/
 ReadWriteDirectories=-{{ redis_data_dir_prefix }}-%i
 ReadWriteDirectories=-{{ redis_log_dir_prefix }}-%i