diff --git a/handlers/main.yml b/handlers/main.yml
index 1cb2da1..2700c5c 100644
--- a/handlers/main.yml
+++ b/handlers/main.yml
@@ -16,3 +16,5 @@
 - name: Listen for IPSEC connections
   shell: ipsec whack --listen
   become: yes
+  when:
+  - inventory_hostname in groups['pacemaker']