diff --git a/roles/penpot/defaults/main.yml b/roles/penpot/defaults/main.yml
index 2c421bb..d90e958 100644
--- a/roles/penpot/defaults/main.yml
+++ b/roles/penpot/defaults/main.yml
@@ -1,7 +1,7 @@
 ---
 
 # Penpot version to deploy
-penpot_version: 1.16.0-beta
+penpot_version: 1.17.0
 # SHould ansible manage upgrades. If False, only the initial install will be done
 penpot_manage_upgrade: True
 
@@ -10,7 +10,7 @@ penpot_root_dir: /opt/penpot
 # URL of the archive
 penpot_archive_url: https://github.com/penpot/penpot/archive/refs/tags/{{ penpot_version }}.tar.gz
 # Expected sha256 of the archive
-penpot_archive_sha256: b982dc6f43efae98f0854fbb0bf44dd709f2ed5272742be7c861008f129a68dd
+penpot_archive_sha256: 5d0c2583f81d7f4fb0528c1751bd6b2aa72e49f5eed1f5b1e74a5d24c75cacf3
 # User under which penpot will run. Will be created
 penpot_user: penpot
 
diff --git a/roles/penpot/templates/env.j2 b/roles/penpot/templates/env.j2
index dd3e3e2..e76891d 100644
--- a/roles/penpot/templates/env.j2
+++ b/roles/penpot/templates/env.j2
@@ -50,10 +50,10 @@ PENPOT_REGISTRATION_DOMAIN_WHITELIST="{{ penpot_user_registration_allowed_domain
 ## Authentication providers
 {% if penpot_oidc_auth %}
 PENPOT_OIDC_BASE_URI={{ penpot_oidc_base_url }}
-PENPOT_OIDC_USER_URL={{ penpot_oidc_user_url }}
-PENPOT_OIDC_AUTH_URL={{ penpot_oidc_auth_url }}
-PENPOT_OIDC_TOKEN_URL={{ penpot_oidc_token_url }}
-PENPOT_OIDC_SCOPE={{ penpot_oidc_scope }}
+PENPOT_OIDC_USER_URI={{ penpot_oidc_user_url }}
+PENPOT_OIDC_AUTH_URI={{ penpot_oidc_auth_url }}
+PENPOT_OIDC_TOKEN_URI={{ penpot_oidc_token_url }}
+PENPOT_OIDC_SCOPE="{{ penpot_oidc_scope }}"
 PENPOT_OIDC_CLIENT_ID={{ penpot_oidc_client_id }}
 PENPOT_OIDC_CLIENT_SECRET={{ penpot_oidc_client_secret }}
 {% endif %}