diff --git a/roles/openvpn/tasks/main.yml b/roles/openvpn/tasks/main.yml
index ed80084a1..16e8417ba 100644
--- a/roles/openvpn/tasks/main.yml
+++ b/roles/openvpn/tasks/main.yml
@@ -89,14 +89,14 @@
   register: stat
 
 
-# note that ansible does not currently handle @ in a service name (FIXED SOMETIME PRIOR TO AUGUST 2018??)
-- name: Enable & Start openvpn@xscenet tunnel
+- name: Enable & (Re)Start openvpn@xscenet tunnel
   systemd:
     name: openvpn@xscenet.service
     enabled: yes
-    state: started
+    state: restarted
   when: openvpn_enabled and not stat.exists is defined
 
+# FIXED SOMETIME PRIOR TO AUGUST 2018: ansible [did] not handle @ in a service name
 #- name: Enable the OpenVPN tunnel at boot time (debuntu)
 #  shell: systemctl enable openvpn@xscenet.service
 #  when: openvpn_enabled and not stat.exists is defined and is_debuntu