roles/debian-base/tasks/root.yml

@@ -2,10 +2,10 @@
   set_fact:
     root_pass_changed: "{{ vn_ini.witness.root_pass_changed | default(false) }}"
 - when: vn_witness_checked and not root_pass_changed
-  block:
+  no_log: true
+  block:  
   - name: Search root password in Passbolt
     ignore_errors: true
-    no_log: true
     set_fact:
       passbolt_password: >
         {{
@@ -17,11 +17,9 @@
   - when: passbolt_password is not defined
     block:
     - name: Generate a random root password
-      no_log: true
       set_fact:
         root_password: "{{ lookup('password', '/dev/null length=18 chars=ascii_letters,digits') }}"
     - name: Save root password into Passbolt
-      no_log: true
       set_fact:
         msg: >
           {{