diff --git a/roles/backup_client/defaults/main.yml b/roles/backup_client/defaults/main.yml
index 350a361d734f23639f116d51064070e3d7cf0ff9..ed9ee5c50d1971b074a05e16fc75ea6a171025c3 100644
--- a/roles/backup_client/defaults/main.yml
+++ b/roles/backup_client/defaults/main.yml
@@ -4,3 +4,20 @@ backup_additional_encryption_keys: []
 backup_client_username: "bak-{{ ansible_fqdn | replace('.', '_') }}"
 backup_server_destination: /duplicity
 backup_server_port: 2222
+
+# Internal parameters.
+
+# GnuPG 2 binary in Debian Jessie and Debian Stretch is different. Additionally,
+# Debian Jessie duply configuration expects short keys, while Debian Stretch
+# expects long keys. We set-up parameters for this here in a bit of a workaround
+# way instead of setting facts within the playbook.
+backup_client_gnupg_details:
+  jessie:
+    binary: gpg2
+    cutoff: '{8}'
+  stretch:
+    binary: gpg
+    cutoff: '{0}'
+
+gnupg_binary: "{{ backup_client_gnupg_details[ansible_distribution_release]['binary'] }}"
+gnupg_key_cutoff: "{{ backup_client_gnupg_details[ansible_distribution_release]['cutoff'] }}"