roles/debian-base/defaults/main.yaml

@@ -1,4 +1,4 @@
-vn_witness: false
+vn_no_witness: false
 default_user: user
 fail2ban:
   email: "{{ sysadmin_mail }}"

roles/debian-base/tasks/root.yml

@@ -1,5 +1,5 @@
 - name: Generate root password
-  when: vn_witness
+  when: vn_no_witness
   block:
     - name: Search root password into Passbolt
       set_fact:

roles/debian-base/tasks/ssh.yml

@@ -3,7 +3,7 @@
     path: "/etc/ssh/ssh_host_{{ item.type }}_key"
     type: "{{ item.type }}"
     force: yes
-  when: vn_witness
+  when: vn_no_witness
   loop:
     - { type: 'rsa' }
     - { type: 'ecdsa' }

roles/debian-base/tasks/witness.yml

@@ -4,9 +4,9 @@
   register: keys_generated_marker
 - name: Generate variable if not exists
   set_fact:
-    vn_witness: "{{ not keys_generated_marker.stat.exists }}"
+    vn_no_witness: "{{ not keys_generated_marker.stat.exists }}"
 - name: Create marker file to indicate vn happends
   file:
     path: /etc/vn.witness
     state: touch
-  when: vn_witness
+  when: vn_no_witness