More rework

bank.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: bank
   roles:
     - common

bar.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: bank-pi.bitlair.nl
   vars:
     raspi_rotate_display: "2"

common.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: debian
   roles:
     - common

fotos.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: fotos
   roles:
     - common

git-ci.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: git-ci
   roles:
     - common

git.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: git
   roles:
     - common

monitoring.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: monitoring
   roles:
     - common

mqtt-internal.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: mqtt_internal
   roles:
     - common

music.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: music
   roles:
     - common

pad.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: pad
   vars:
     acme_san_domains:

roles/common-bitlair/tasks/main.yaml

@@ -1,8 +1,8 @@
 ---
 - name: Update authorized_keys
-  tags: authorized_keys
   ansible.builtin.template:
     src: authorized_keys.j2
     dest: /root/.ssh/authorized_keys
     mode: 0600
   when: root_access is defined and root_access
+  tags: authorized_keys

roles/common/tasks/main.yaml

@@ -1,13 +1,17 @@
 ---
-- tags: [ debian-upgrade, never ]
+
+- name: Import debian-upgrade.yaml if not bookworm
   ansible.builtin.import_tasks:
     file: debian-upgrade.yaml
   when: ansible_facts['distribution_release'] != "bookworm"
+  tags: [ debian-upgrade, never ]
 
-- tags: debian_backports
+- name: Import debian-backports.yaml
   ansible.builtin.import_tasks:
     file: debian-backports.yaml
 
+  tags: debian_backports
+
 - tags: unattended_updates
   ansible.builtin.import_tasks:
     file: unattended-updates.yaml

services.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: services
   roles:
     - common

www.yaml

@@ -1,4 +1,5 @@
 ---
+
 - hosts: wiki
   roles:
     - common