diff --git a/vpn/vpn-config.tf b/vpn/vpn-config.tf
index 25cac06..912eedb 100644
--- a/vpn/vpn-config.tf
+++ b/vpn/vpn-config.tf
@@ -3,6 +3,7 @@ locals {
     site              = v.site
     environment       = lookup(v, "environment", "")
     sequence          = lookup(v, "sequence", "")
+    file_label        = join("-", compact([v.site, lookup(v, "environment", ""), lookup(v, "sequence", "")]))
     label             = lookup(v, "label", var.vpc_full_name)
     full_label        = format("aws:%v:%v:%v:%v", local.region, local.account_id, aws_vpn_connection.vpn[k].id, lookup(v, "label", var.vpc_full_name))
     customer_address  = aws_customer_gateway.vpn[k].ip_address
@@ -40,7 +41,7 @@ resource "null_resource" "generate_configs" {
   }
   provisioner "local-exec" {
     working_dir = "${path.root}/vpn-configs"
-    command     = "aws ec2 get-vpn-connection-device-sample-configuration --vpn-connection-id ${each.value.vpn_connection_id} --vpn-connection-device-type-id 48548f98 --internet-key-exchange-version ikev1 --output text > ${each.value.label}.${each.value.vpn_connection_id}.txt"
+    command     = "aws ec2 get-vpn-connection-device-sample-configuration --vpn-connection-id ${each.value.vpn_connection_id} --vpn-connection-device-type-id 48548f98 --internet-key-exchange-version ikev1 --output text > ${each.value.file_label}.${each.value.vpn_connection_id}.txt"
     environment = {
       AWS_PROFILE = var.profile
       AWS_REGION  = local.region