Optimized tests für run once

roles/desk-gnome-caffeine/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs caffeine-ng and configures it to autostart for preventing screen sleep on GNOME."
@@ -6,12 +5,10 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.4"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - caffeine
+  - caffeine
-    - autostart
+  - autostart
-    - archlinux
+  - archlinux
-dependencies:
-  - dev-yay

roles/desk-gnome-caffeine/tasks/main.yml

@@ -1,9 +1,16 @@
----
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_desk_gnome_caffeine: true
+  when: run_once_desk_gnome_caffeine is not defined
 - name: Install caffeine
   kewlfft.aur.aur:
     use: yay
     name:
-      - caffeine-ng
+    - caffeine-ng
   become: false
 
 - name: Create autostart directory if it doesn't exist

roles/desk-qbittorrent/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Installs the qBittorrent torrent client via AUR on Arch Linux."
@@ -9,15 +8,12 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - qbittorrent
+  - qbittorrent
-    - torrent
+  - torrent
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/desk-qbittorrent"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - dev-yay
-

roles/desk-qbittorrent/tasks/main.yml

@@ -1,5 +1,13 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_desk_qbittorrent: true
+  when: run_once_desk_qbittorrent is not defined
 - name: install torrent software
   kewlfft.aur.aur:
     use: yay
     name:
-      - qbittorrent
+    - qbittorrent

roles/desk-spotify/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs the Spotify client."
@@ -10,18 +9,16 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - spotify
+  - spotify
-    - aur
+  - aur
-    - music
+  - music
-    - streaming
+  - streaming
-    - archlinux
+  - archlinux
-    - client
+  - client
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - dev-yay

roles/desk-spotify/tasks/main.yml

@@ -1,5 +1,13 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_desk_spotify: true
+  when: run_once_desk_spotify is not defined
 - name: install spotify
   kewlfft.aur.aur:
     use: yay
     name:
-      - spotify
+    - spotify

roles/desk-ssh/meta/main.yml

@@ -1,30 +1,28 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git."
   license: "Infinito.Nexus NonCommercial License (CNCL)"
   license_url: "https://s.veen.world/cncl"
-  company: | 
+  company: |
     Kevin Veen-Birkenbach
     Consulting & Coaching Solutions
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - ssh
+  - ssh
-    - agent
+  - agent
-    - systemd
+  - systemd
-    - gnome
+  - gnome
-    - wayland
+  - wayland
-    - archlinux
+  - archlinux
-    - keepassxc
+  - keepassxc
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
 
 dependencies:
-  - desk-git
+- desk-git
-  - dev-shell

roles/desk-ssh/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-shell'
+    include_role:
+      name: dev-shell
+  - set_fact:
+      run_once_desk_ssh: true
+  when: run_once_desk_ssh is not defined
 - name: pull ssh repository from {{desk_ssh_repository}}
   git:
     repo: "{{desk_ssh_repository}}"
@@ -43,4 +51,4 @@
     state: present
     create: yes
     mode: "0644"
-  become: false
+  become: false

roles/desk-zoom/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Installs the Zoom video conferencing client via AUR on Arch Linux."
@@ -9,16 +8,13 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - zoom
+  - zoom
-    - video
+  - video
-    - conferencing
+  - conferencing
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/desk-zoom"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - dev-yay
-

roles/desk-zoom/tasks/main.yml

@@ -1,6 +1,14 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_desk_zoom: true
+  when: run_once_desk_zoom is not defined
 - name: install video conference software
   kewlfft.aur.aur:
     use: yay
     name:
-      - zoom
+    - zoom
-  become: false
+  become: false

roles/dev-python-pip/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system."
@@ -10,17 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - python
+  - python
-    - pip
+  - pip
-    - package
+  - package
-    - installation
+  - installation
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - dev-gcc

roles/dev-python-pip/tasks/main.yml

@@ -1,4 +1,11 @@
----
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-gcc'
+    include_role:
+      name: dev-gcc
+  - set_fact:
+      run_once_dev_python_pip: true
+  when: run_once_dev_python_pip is not defined
 - name: python pip install
   community.general.pacman:
     name: python-pip

roles/dev-yay/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs the AUR helper yay and configures an aur_builder user with appropriate sudo privileges to facilitate AUR package management on Arch Linux systems."
@@ -10,20 +9,16 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - aur
+  - aur
-    - yay
+  - yay
-    - archlinux
+  - archlinux
-    - package-management
+  - package-management
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
   logo:
     class: "fas fa-archive"
-dependencies:
-  - dev-fakeroot
-  - dev-git
-  - dev-base-devel

roles/dev-yay/tasks/main.yml

@@ -1,8 +1,20 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-fakeroot
+    - dev-git
+    - dev-base-devel
+  - set_fact:
+      run_once_dev_yay: true
+  when: run_once_dev_yay is not defined
 - name: install yay
   community.general.pacman:
     name:
-      - base-devel
+    - base-devel
-      - patch
+    - patch
     state: present
 
 - name: Create the `aur_builder` user
@@ -36,4 +48,4 @@
     cd /home/aur_builder/yay
     makepkg -si --noconfirm
   args:
-    creates: /usr/bin/yay
+    creates: /usr/bin/yay

roles/docker-compose/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Manages Docker Compose project structure and execution logic on Arch Linux."
@@ -10,19 +9,17 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - docker
+  - docker
-    - compose
+  - compose
-    - container
+  - container
-    - infrastructure
+  - infrastructure
-    - devops
+  - devops
-    - automation
+  - automation
-    - archlinux
+  - archlinux
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - docker-container # Necessary for template use

roles/docker-compose/tasks/main.yml

@@ -1,10 +1,16 @@
-# run_once_docker_compose: deactivate
+- name: Load former meta dependencies once
-
+  block:
+  - name: Include moved dependency 'docker-container'
+    include_role:
+      name: docker-container
+  - set_fact:
+      run_once_docker_compose: true
+  when: run_once_docker_compose is not defined
 - name: "Load variables from {{ docker_compose_variable_file }} for whole play"
   include_vars: "{{ docker_compose_variable_file }}"
 
 - name: "reset (if enabled)"
-  include_tasks: 01_reset.yml 
+  include_tasks: 01_reset.yml
   when: mode_reset | bool
 
 # This could lead to problems in docker-compose directories which are based on a git repository
@@ -21,12 +27,12 @@
   when: docker_pull_git_repository | bool
 
 - block:
-    - name: "Include file management routines for '{{application_id}}'."
+  - name: "Include file management routines for '{{application_id}}'."
-      include_tasks: "03_files.yml"
+    include_tasks: "03_files.yml"
-    - name: "Ensure that {{ docker_compose.directories.instance }} is up"
+  - name: "Ensure that {{ docker_compose.directories.instance }} is up"
-      include_tasks: "04_ensure_up.yml"
+    include_tasks: "04_ensure_up.yml"
   when: not docker_compose_skipp_file_creation | bool
 
-- name: "flush database, docker and proxy for '{{ application_id }}'" 
+- name: "flush database, docker and proxy for '{{ application_id }}'"
   meta: flush_handlers
   when: docker_compose_flush_handlers | bool

roles/docker-container/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Provides shared Jinja2 snippets for Docker Compose service definitions (base, networks, healthchecks, depends_on)."
@@ -9,15 +8,13 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - docker
+  - docker
-    - compose
+  - compose
-    - jinja2
+  - jinja2
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/docker-container"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - docker-core

roles/docker-container/tasks/main.yml

@@ -0,0 +1,8 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'docker-core'
+    include_role:
+      name: docker-core
+  - set_fact:
+      run_once_docker_container: true
+  when: run_once_docker_container is not defined

roles/drv-epson-multiprinter/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Installs Epson multifunction printer drivers and scanning utilities (escpr, imagescan) via Pacman and AUR on Arch Linux."
@@ -9,16 +8,13 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - epson
+  - epson
-    - printer
+  - printer
-    - scanner
+  - scanner
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/drv-epson-multiprinter"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - dev-yay
-

roles/drv-epson-multiprinter/tasks/main.yml

@@ -1,13 +1,21 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_drv_epson_multiprinter: true
+  when: run_once_drv_epson_multiprinter is not defined
 - name: install AUR packages for epson
   kewlfft.aur.aur:
     use: yay
     name:
-      - epson-printer-utility
+    - epson-printer-utility
-      - imagescan-plugin-networkscan
+    - imagescan-plugin-networkscan
-      - epson-inkjet-printer-escpr
+    - epson-inkjet-printer-escpr
-      - epson-inkjet-printer-escpr2
+    - epson-inkjet-printer-escpr2
   become: false
 - name: install imagescan
   community.general.pacman:
     name: imagescan
-    state: present
+    state: present

roles/drv-msi-keyboard-color/meta/main.yml

@@ -4,9 +4,6 @@ galaxy_info:
   description: "Ansible role to set up dynamic keyboard color change on MSI laptops"
   min_ansible_version: 2.9
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
-dependencies:
-  - dev-yay
-  - sys-alm-compose

roles/drv-msi-keyboard-color/tasks/main.yml

@@ -1,9 +1,19 @@
----
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-yay
+    - sys-alm-compose
+  - set_fact:
+      run_once_drv_msi_keyboard_color: true
+  when: run_once_drv_msi_keyboard_color is not defined
 - name: Install MSI packages
   kewlfft.aur.aur:
     use: yay
     name:
-      - msi-perkeyrgb
+    - msi-perkeyrgb
 
 - name: Copy keyboard_color.sh script
   copy:
@@ -29,5 +39,5 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_msi_keyboard_color}}"
+    on_calendar: "{{on_calendar_msi_keyboard_color}}"
-    persistent:   "true"
+    persistent: "true"

roles/pkgmgr-install/meta/main.yml

@@ -3,22 +3,20 @@ galaxy_info:
   description: "Installs and updates packages using pkgmgr."
   license: "Infinito.Nexus NonCommercial License (CNCL)"
   license_url: "https://s.veen.world/cncl"
-  company: | 
+  company: |
     Kevin Veen-Birkenbach
     Consulting & Coaching Solutions
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - package
+  - package
-    - update
+  - update
-    - archlinux
+  - archlinux
-    - infinito
+  - infinito
   repository: https://github.com/kevinveenbirkenbach/package-manager
   issue_tracker_url: https://github.com/kevinveenbirkenbach/package-manager/issues
   documentation: https://github.com/kevinveenbirkenbach/package-manager
-dependencies:
-  - pkgmgr

roles/pkgmgr-install/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'pkgmgr'
+    include_role:
+      name: pkgmgr
+  - set_fact:
+      run_once_pkgmgr_install: true
+  when: run_once_pkgmgr_install is not defined
 - name: update pkgmgr
   shell: |
     source ~/.venvs/pkgmgr/bin/activate
@@ -16,4 +24,4 @@
 - name: mark pkgmgr update as done
   set_fact:
     run_once_pkgmgr_install: true
-  when: run_once_pkgmgr_install is not defined
+  when: run_once_pkgmgr_install is not defined

roles/pkgmgr/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automates the installation of Kevin's Package Manager — a tool for managing multiple repositories and automating Git operations."
@@ -10,29 +9,25 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Debian
+  - name: Debian
-      versions:
+    versions:
-        - stretch
+    - stretch
-        - buster
+    - buster
-        - bullseye
+    - bullseye
-    - name: Ubuntu
+  - name: Ubuntu
-      versions:
+    versions:
-        - bionic
+    - bionic
-        - focal
+    - focal
-        - jammy
+    - jammy
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - pkgmgr
+  - pkgmgr
-    - automation
+  - automation
-    - git
+  - git
-    - repositories
+  - repositories
-    - development
+  - development
   repository: https://github.com/kevinveenbirkenbach/package-manager
   issue_tracker_url: https://github.com/kevinveenbirkenbach/package-manager/issues
   documentation: https://github.com/kevinveenbirkenbach/package-manager
-dependencies:
-  - dev-git
-  - dev-make
-  - dev-python-yaml

roles/pkgmgr/tasks/01_core.yml

@@ -1,3 +1,15 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-git
+    - dev-make
+    - dev-python-yaml
+  - set_fact:
+      run_once_pkgmgr: true
+  when: run_once_pkgmgr is not defined
 - name: Ensure GitHub host key is in known_hosts
   known_hosts:
     path: "~/.ssh/known_hosts"
@@ -27,10 +39,10 @@
   become: true
 
 - name: create config.yaml
-  template: 
+  template:
     src: config.yaml.j2
     dest: "{{pkgmgr_config_path}}"
-  become: true  
+  become: true
 
 - name: Run the Package Manager install command to create an alias for Kevins package manager
   shell: |
@@ -39,4 +51,4 @@
   args:
     chdir: "{{ pkgmgr_install_path }}"
     executable: /bin/bash
-  become: true
+  become: true

roles/srv-proxy-6-6-domain/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automated domain provisioning (TLS, vHost, OAuth2) for Nginx."
@@ -10,18 +9,16 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - tls
+  - tls
-    - letsencrypt
+  - letsencrypt
-    - oauth2
+  - oauth2
-    - automation
+  - automation
-    - archlinux
+  - archlinux
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - srv-proxy-7-4-core

roles/srv-proxy-6-6-domain/tasks/main.yml

@@ -1,5 +1,11 @@
-# run_once_srv_proxy_6_6_domain: deactivated
+- name: Load former meta dependencies once
-
+  block:
+  - name: Include moved dependency 'srv-proxy-7-4-core'
+    include_role:
+      name: srv-proxy-7-4-core
+  - set_fact:
+      run_once_srv_proxy_6_6_domain: true
+  when: run_once_srv_proxy_6_6_domain is not defined
 - include_tasks: "01_cloudflare.yml"
   when: dns_provider == "cloudflare"
 
@@ -10,7 +16,7 @@
 - name: "include role for {{ domain }} to receive certificates and do the modification routines"
   include_role:
     name: srv-web-7-6-composer
-    
+
 - name: "Copy nginx config to {{ configuration_destination }}"
   template:
     src: "{{ vhost_template_src }}"
@@ -19,18 +25,18 @@
   notify: restart openresty
 
 - block:
-    - name: "Check if {{ domains | get_domain(application_id) }} is reachable (only if config unchanged)"
+  - name: "Check if {{ domains | get_domain(application_id) }} is reachable (only if config unchanged)"
-      uri:
+    uri:
-        url: "{{ domains | get_url(application_id, WEB_PROTOCOL) }}"
+      url: "{{ domains | get_url(application_id, WEB_PROTOCOL) }}"
-      register: site_check
+    register: site_check
-      failed_when:  false
+    failed_when: false
-      changed_when: false
+    changed_when: false
 
-    - name: Restart nginx if site is down
+  - name: Restart nginx if site is down
-      command:
+    command:
-        cmd: "true"
+      cmd: "true"
-      notify: restart openresty
+    notify: restart openresty
-      when:
+    when:
-        - site_check.status is defined
+    - site_check.status is defined
-        - not site_check.status in [200,301,302]
+    - not site_check.status in [200,301,302]
-  when: not nginx_conf.changed
+  when: not nginx_conf.changed

roles/srv-proxy-6-6-tls-deploy/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Deploys Let’s Encrypt certificates into Docker Compose Nginx setups via systemd service and timer."
@@ -9,17 +8,14 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - nginx
+  - nginx
-    - letsencrypt
+  - letsencrypt
-    - docker
+  - docker
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/srv-proxy-6-6-tls-deploy"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - sys-alm-compose
-

roles/srv-proxy-6-6-tls-deploy/tasks/main.yml

@@ -1,20 +1,28 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_srv_proxy_6_6_tls_deploy: true
+  when: run_once_srv_proxy_6_6_tls_deploy is not defined
 - name: add srv-proxy-6-6-tls-deploy.sh
-  template: 
+  template:
-    src: "srv-proxy-6-6-tls-deploy.sh.j2" 
+    src: "srv-proxy-6-6-tls-deploy.sh.j2"
     dest: "{{nginx_docker_cert_deploy_script}}"
   when: run_once_srv_proxy_6_6_tls_deploy is not defined
   notify: restart srv-proxy-6-6-tls-deploy.infinito.service
 
 - name: "create {{cert_mount_directory}}"
   file:
-    path:     "{{cert_mount_directory}}"
+    path: "{{cert_mount_directory}}"
-    state:    directory
+    state: directory
-    mode:     0755
+    mode: 0755
   notify: restart srv-proxy-6-6-tls-deploy.infinito.service
 
 - name: configure srv-proxy-6-6-tls-deploy.infinito.service
-  template: 
+  template:
-    src:  "srv-proxy-6-6-tls-deploy.service.j2"
+    src: "srv-proxy-6-6-tls-deploy.service.j2"
     dest: "/etc/systemd/system/srv-proxy-6-6-tls-deploy.{{application_id}}.infinito.service"
   notify: restart srv-proxy-6-6-tls-deploy.infinito.service
 
@@ -22,11 +30,11 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_deploy_certificates}}"
+    on_calendar: "{{on_calendar_deploy_certificates}}"
     service_name: "srv-proxy-6-6-tls-deploy.{{application_id}}"
-    persistent:   "true"
+    persistent: "true"
 
 - name: run the run_once_srv_proxy_6_6_tls_deploy tasks once
   set_fact:
     run_once_srv_proxy_6_6_tls_deploy: true
-  when: run_once_srv_proxy_6_6_tls_deploy is not defined
+  when: run_once_srv_proxy_6_6_tls_deploy is not defined

roles/srv-proxy-7-4-core/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Nginx reverse proxy front-end for local Docker applications."
@@ -10,19 +9,16 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - docker
+  - docker
-    - reverse_proxy
+  - reverse_proxy
-    - web
+  - web
-    - automation
+  - automation
-    - archlinux
+  - archlinux
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - srv-web-7-6-https
-  - srv-web-7-4-core

roles/srv-proxy-7-4-core/tasks/main.yml

@@ -0,0 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - srv-web-7-6-https
+    - srv-web-7-4-core
+  - set_fact:
+      run_once_srv_proxy_7_4_core: true
+  when: run_once_srv_proxy_7_4_core is not defined

roles/srv-web-6-6-tls-core/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: |
@@ -11,21 +10,19 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - certbot
+  - certbot
-    - letsencrypt
+  - letsencrypt
-    - ssl
+  - ssl
-    - tls
+  - tls
-    - acme
+  - acme
-    - https
+  - https
-    - wildcard
+  - wildcard
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - srv-web-7-6-https

roles/srv-web-6-6-tls-core/tasks/main.yml

@@ -1,5 +1,11 @@
-# run_once_srv_web_6_6_tls_core: deactivated
+- name: Load former meta dependencies once
-
+  block:
+  - name: Include moved dependency 'srv-web-7-6-https'
+    include_role:
+      name: srv-web-7-6-https
+  - set_fact:
+      run_once_srv_web_6_6_tls_core: true
+  when: run_once_srv_web_6_6_tls_core is not defined
 - name: "Include flavor '{{ certbot_flavor }}' for '{{ domain }}'"
   include_tasks: "{{ role_path }}/tasks/flavors/{{ certbot_flavor }}.yml"
 
@@ -36,4 +42,4 @@
 - name: "Ensure ssl_cert_folder is set for domain {{ domain }}"
   fail:
     msg: "No certificate folder found for domain {{ domain }}"
-  when: ssl_cert_folder is undefined or ssl_cert_folder is none
+  when: ssl_cert_folder is undefined or ssl_cert_folder is none

roles/srv-web-6-6-tls-renew/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: |
@@ -11,23 +10,20 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - certbot
+  - certbot
-    - ssl
+  - ssl
-    - tls
+  - tls
-    - letsencrypt
+  - letsencrypt
-    - https
+  - https
-    - systemd
+  - systemd
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
 dependencies:
-  - srv-web-7-7-certbot
+- sys-cln-certs
-  - srv-web-7-4-core
-  - sys-alm-compose
-  - sys-cln-certs

roles/srv-web-6-6-tls-renew/tasks/01_core.yml

@@ -1,12 +1,24 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - srv-web-7-7-certbot
+    - srv-web-7-4-core
+    - sys-alm-compose
+  - set_fact:
+      run_once_srv_web_6_6_tls_renew: true
+  when: run_once_srv_web_6_6_tls_renew is not defined
 - name: install certbot
   community.general.pacman:
     name:
-      - certbot-nginx
+    - certbot-nginx
     state: present
 
 - name: configure srv-web-6-6-tls-renew.infinito.service
-  template: 
+  template:
-    src:  srv-web-6-6-tls-renew.service.j2
+    src: srv-web-6-6-tls-renew.service.j2
     dest: /etc/systemd/system/srv-web-6-6-tls-renew.infinito.service
   notify: reload certbot service
 
@@ -18,5 +30,5 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_renew_lets_encrypt_certificates}}"
+    on_calendar: "{{on_calendar_renew_lets_encrypt_certificates}}"
-    persistent:   "true"
+    persistent: "true"

roles/srv-web-7-6-https/meta/main.yml

@@ -9,20 +9,16 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - https
+  - https
-    - tls
+  - tls
-    - letsencrypt
+  - letsencrypt
-    - security
+  - security
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
-dependencies:
-  - srv-web-7-4-core
-  - sys-cln-domains
-  - srv-web-7-7-letsencrypt

roles/srv-web-7-6-https/tasks/main.yml

@@ -0,0 +1,12 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - srv-web-7-4-core
+    - sys-cln-domains
+    - srv-web-7-7-letsencrypt
+  - set_fact:
+      run_once_srv_web_7_6_https: true
+  when: run_once_srv_web_7_6_https is not defined

roles/srv-web-7-7-inj-compose/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Core role for Nginx HTML injection of Matomo, theming, iFrame and JS snippets based on application feature flags."
@@ -9,19 +8,15 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - nginx
+  - nginx
-    - injector
+  - injector
-    - matomo
+  - matomo
-    - theming
+  - theming
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/srv-web-7-7-inj-compose"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions:
+    versions:
-        - all
+    - all
-dependencies:
-# The injections are called in the script. Keep the logic there.
-  - srv-web-7-4-core
-  

roles/srv-web-7-7-inj-compose/tasks/main.yml

@@ -1,29 +1,35 @@
-# run_once_srv_web_7_7_inj_compose: deactivated
+- name: Load former meta dependencies once
-
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_compose: true
+  when: run_once_srv_web_7_7_inj_compose is not defined
 - name: Set inj_enabled dictionary
   set_fact:
     inj_enabled:
       javascript: "{{ applications | get_app_conf(application_id, 'features.javascript', False) }}"
-      logout:     "{{ (applications | get_app_conf(application_id, 'features.logout', False) or domain == primary_domain) }}"
+      logout: "{{ (applications | get_app_conf(application_id, 'features.logout', False) or domain == primary_domain) }}"
-      css:        "{{ applications | get_app_conf(application_id, 'features.css', False) }}"
+      css: "{{ applications | get_app_conf(application_id, 'features.css', False) }}"
-      matomo:     "{{ applications | get_app_conf(application_id, 'features.matomo', False) }}"
+      matomo: "{{ applications | get_app_conf(application_id, 'features.matomo', False) }}"
-      port_ui:    "{{ applications | get_app_conf(application_id, 'features.port-ui-desktop', False) }}"
+      port_ui: "{{ applications | get_app_conf(application_id, 'features.port-ui-desktop', False) }}"
 
 - name: "Load CDN for {{domain}}"
   include_role:
     name: web-svc-cdn
     public: false
   # ATM just the Logout is using the CDN.
-  when: 
+  when:
-    - inj_enabled.logout
+  - inj_enabled.logout
-    - application_id != 'web-svc-cdn'
+  - application_id != 'web-svc-cdn'
-    - run_once_web_svc_cdn is not defined
+  - run_once_web_svc_cdn is not defined
 
 - name: Overwritte CDN handlers with neutral handlers
   ansible.builtin.include_tasks: "{{ playbook_dir }}/tasks/utils/load_handlers.yml"
   loop:
-    - svc-prx-openresty
+  - svc-prx-openresty
-    - docker-compose
+  - docker-compose
   loop_control:
     label: "{{ item }}"
   vars:
@@ -33,17 +39,17 @@
   set_fact:
     inj_enabled:
       javascript: "{{ applications | get_app_conf(application_id, 'features.javascript', False) }}"
-      logout:     "{{ (applications | get_app_conf(application_id, 'features.logout', False) or domain == primary_domain) }}"
+      logout: "{{ (applications | get_app_conf(application_id, 'features.logout', False) or domain == primary_domain) }}"
-      css:        "{{ applications | get_app_conf(application_id, 'features.css', False) }}"
+      css: "{{ applications | get_app_conf(application_id, 'features.css', False) }}"
-      matomo:     "{{ applications | get_app_conf(application_id, 'features.matomo', False) }}"
+      matomo: "{{ applications | get_app_conf(application_id, 'features.matomo', False) }}"
-      port_ui:    "{{ applications | get_app_conf(application_id, 'features.port-ui-desktop', False) }}"
+      port_ui: "{{ applications | get_app_conf(application_id, 'features.port-ui-desktop', False) }}"
 
 - name: "Activate Corporate CSS for {{domain}}"
   include_role:
     name: srv-web-7-7-inj-css
-  when: 
+  when:
-    - inj_enabled.css
+  - inj_enabled.css
-    - run_once_srv_web_7_7_inj_css is not defined
+  - run_once_srv_web_7_7_inj_css is not defined
 
 - name: "Activate Matomo Tracking for {{domain}}"
   include_role:

roles/srv-web-7-7-inj-css/meta/main.yml

@@ -1,29 +1,26 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Global CSS injection for Nginx-based apps using dynamic colorschemes."
   license: "Infinito.Nexus NonCommercial License (CNCL)"
   license_url: "https://s.veen.world/cncl"
-  company: | 
+  company: |
     Kevin Veen-Birkenbach  
     Consulting & Coaching Solutions  
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - css
+  - css
-    - colors
+  - colors
-    - bootstrap
+  - bootstrap
-    - theming
+  - theming
-    - dynamic
+  - dynamic
-    - frontend
+  - frontend
-    - global
+  - global
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - srv-web-7-4-core

roles/srv-web-7-7-inj-css/tasks/01_core.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_css: true
+  when: run_once_srv_web_7_7_inj_css is not defined
 - name: Generate color palette with colorscheme-generator
   set_fact:
     color_palette: "{{ lookup('colorscheme', global_css_base_color, count=global_css_count, shades=global_css_shades) }}"
@@ -21,4 +29,4 @@
 
 - name: Set global_css_version
   set_fact:
-    global_css_version: "{{ global_css_stat.stat.mtime }}"
+    global_css_version: "{{ global_css_stat.stat.mtime }}"

roles/srv-web-7-7-inj-javascript/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Injects a custom JavaScript snippet into Nginx-served HTML responses via sub_filter."
@@ -10,19 +9,17 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - javascript
+  - javascript
-    - csp
+  - csp
-    - sub_filter
+  - sub_filter
-    - injection
+  - injection
-    - global
+  - global
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
 
-dependencies:
-  - srv-web-7-4-core

roles/srv-web-7-7-inj-javascript/tasks/main.yml

@@ -1,4 +1,11 @@
-# run_once_srv_web_7_7_inj_javascript: deactivated
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_javascript: true
+  when: run_once_srv_web_7_7_inj_javascript is not defined
 - name: "Load JavaScript code for '{{ application_id }}'"
   set_fact:
     javascript_code: "{{ lookup('template', modifier_javascript_template_file) }}"

roles/srv-web-7-7-inj-logout/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen‑Birkenbach"
   role_name: "srv-web-7-7-inj-logout"
@@ -9,21 +8,17 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions: ["all"]
+    versions: ["all"]
   galaxy_tags:
-    - nginx
+  - nginx
-    - logout
+  - logout
-    - oidc
+  - oidc
-    - javascript
+  - javascript
-    - csp
+  - csp
-    - sub_filter
+  - sub_filter
   company: >
-    Kevin Veen‑Birkenbach  
+    Kevin Veen‑Birkenbach   Consulting & Coaching Solutions   https://www.veen.world
-    Consulting & Coaching Solutions  
-    https://www.veen.world
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/srv-web-7-7-inj-logout"
-dependencies:
-  - srv-web-7-4-core

roles/srv-web-7-7-inj-logout/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_logout: true
+  when: run_once_srv_web_7_7_inj_logout is not defined
 - name: "deploy the logout.js"
   include_tasks: "deploy.yml"
   when: run_once_srv_web_7_7_inj_logout is not defined

roles/srv-web-7-7-inj-matomo/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Injects Matomo analytics tracking code and noscript image tracker into Nginx-served HTML pages."
@@ -9,16 +8,13 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - nginx
+  - nginx
-    - matomo
+  - matomo
-    - analytics
+  - analytics
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/srv-web-7-7-inj-matomo"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions: [ all ]
+    versions: [all]
-dependencies:
-  - srv-web-7-4-core
-

roles/srv-web-7-7-inj-matomo/tasks/main.yml

@@ -1,5 +1,11 @@
-# run_once_srv_web_7_7_inj_matomo: deactivated
+- name: Load former meta dependencies once
-
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_matomo: true
+  when: run_once_srv_web_7_7_inj_matomo is not defined
 - name: "Relevant variables for role: {{ role_path | basename }}"
   debug:
     msg:
@@ -10,16 +16,16 @@
 
 - name: "Check if site {{ domain }} is allready registered at Matomo"
   uri:
-    url:            "{{ matomo_verification_url }}"
+    url: "{{ matomo_verification_url }}"
-    method:         GET
+    method: GET
     return_content: yes
-    status_code:    200
+    status_code: 200
     validate_certs: yes
-  register:         site_check
+  register: site_check
 
 - name: Set matomo_site_id to Null
   set_fact:
-    matomo_site_id: Null
+    matomo_site_id:
 
 - name: Set fact for site ID if site already exists
   set_fact:

roles/srv-web-7-7-inj-port-ui-desktop/meta/main.yml

@@ -1,5 +1,3 @@
-
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Injects a JS snippet into HTML to notify parent windows of iframe location changes and force external links to new tabs."
@@ -14,15 +12,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - iframe
+  - iframe
-    - javascript
+  - javascript
-    - csp
+  - csp
-    - security
+  - security
-    - postMessage
+  - postMessage
-dependencies:
-  - srv-web-7-4-core

roles/srv-web-7-7-inj-port-ui-desktop/tasks/main.yml

@@ -1,4 +1,11 @@
-# run_once_srv_web_7_7_inj_port_ui_desktop: deactivated
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'srv-web-7-4-core'
+    include_role:
+      name: srv-web-7-4-core
+  - set_fact:
+      run_once_srv_web_7_7_inj_port_ui_desktop: true
+  when: run_once_srv_web_7_7_inj_port_ui_desktop is not defined
 - name: "Load iFrame handler JS template for '{{ application_id }}'"
   set_fact:
     iframe_code: "{{ lookup('template','iframe-handler.js.j2') }}"

roles/srv-web-7-7-letsencrypt/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx"
@@ -10,17 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - letsencrypt
+  - letsencrypt
-    - nginx
+  - nginx
-    - ssl
+  - ssl
-    - certificate
+  - certificate
-    - security
+  - security
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - srv-web-6-6-tls-renew

roles/srv-web-7-7-letsencrypt/tasks/main.yml

@@ -1,13 +1,21 @@
-- block:
+- name: Load former meta dependencies once
-    - name: create nginx letsencrypt config file
+  block:
-      template: 
+  - name: Include moved dependency 'srv-web-6-6-tls-renew'
-        src:  "letsencrypt.conf.j2"
+    include_role:
-        dest: "{{nginx.directories.http.global}}letsencrypt.conf"
+      name: srv-web-6-6-tls-renew
-      notify: restart openresty
+  - set_fact:
-
+      run_once_srv_web_7_7_letsencrypt: true
-    - name: "Set CAA records for all base domains"
+  when: run_once_srv_web_7_7_letsencrypt is not defined
-      include_tasks: 01_set-caa-records.yml
+- block:
-      when: dns_provider == 'cloudflare'
+  - name: create nginx letsencrypt config file
-
+    template:
-    - include_tasks: utils/run_once.yml
+      src: "letsencrypt.conf.j2"
+      dest: "{{nginx.directories.http.global}}letsencrypt.conf"
+    notify: restart openresty
+
+  - name: "Set CAA records for all base domains"
+    include_tasks: 01_set-caa-records.yml
+    when: dns_provider == 'cloudflare'
+
+  - include_tasks: utils/run_once.yml
   when: run_once_srv_web_7_7_letsencrypt is not defined

roles/svc-bkp-loc-2-usb/meta/main.yml

@@ -1,27 +1,23 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automated backups to a swappable USB device."
   license: "Infinito.Nexus NonCommercial License (CNCL)"
   license_url: "https://s.veen.world/cncl"
-  company: | 
+  company: |
     Kevin Veen-Birkenbach
     Consulting & Coaching Solutions
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - backup
+  - backup
-    - usb
+  - usb
-    - systemd
+  - systemd
-    - automation
+  - automation
-    - archlinux
+  - archlinux
   repository: https://github.com/kevinveenbirkenbach/infinito-nexus
   issue_tracker_url: https://github.com/kevinveenbirkenbach/infinito-nexus/issues
   documentation: "https://docs.infinito.nexus/"
-dependencies:
-  - sys-cln-bkps-service
-  - sys-lock

roles/svc-bkp-loc-2-usb/tasks/main.yml

@@ -1,9 +1,20 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-cln-bkps-service
+    - sys-lock
+  - set_fact:
+      run_once_svc_bkp_loc_2_usb: true
+  when: run_once_svc_bkp_loc_2_usb is not defined
 - name: Fail if any backup_to_usb variable is empty
   assert:
     that:
-      - backup_to_usb_mount != ""
+    - backup_to_usb_mount != ""
-      - backup_to_usb_target != ""
+    - backup_to_usb_target != ""
-      - backup_to_usb_source != ""
+    - backup_to_usb_source != ""
     fail_msg: |
       One or more of the configuration variables are empty!
       Please set:
@@ -27,4 +38,4 @@
     owner: root
     group: root
     mode: '0644'
-  notify: reload svc-bkp-loc-2-usb.infinito.service
+  notify: reload svc-bkp-loc-2-usb.infinito.service

roles/svc-bkp-rmt-2-loc/meta/main.yml

@@ -1,5 +1,3 @@
-
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations."
@@ -11,24 +9,19 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - backup
+  - backup
-    - remote
+  - remote
-    - local
+  - local
-    - docker
+  - docker
-    - systemd
+  - systemd
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
 dependencies:
-  - dev-git
+- sys-cln-bkps-timer
-  - sys-alm-compose
+- sys-cln-faild-bkps
-  - sys-cln-bkps-timer
-  - sys-cln-faild-bkps
-  - sys-lock
-  - user-root
-  - sys-rst-daemon

roles/svc-bkp-rmt-2-loc/tasks/main.yml

@@ -1,3 +1,17 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-git
+    - sys-alm-compose
+    - sys-lock
+    - user-root
+    - sys-rst-daemon
+  - set_fact:
+      run_once_svc_bkp_rmt_2_loc: true
+  when: run_once_svc_bkp_rmt_2_loc is not defined
 - name: "create {{docker_backup_remote_to_local_folder}}"
   file:
     path: "{{docker_backup_remote_to_local_folder}}"
@@ -11,14 +25,14 @@
     mode: 0755
 
 - name: create svc-bkp-rmt-2-loc.infinito.service
-  template: 
+  template:
-    src:  svc-bkp-rmt-2-loc.service.j2 
+    src: svc-bkp-rmt-2-loc.service.j2
     dest: /etc/systemd/system/svc-bkp-rmt-2-loc.infinito.service
   notify: reload svc-bkp-rmt-2-loc service
 
 - name: create sys-bkp-rmt-2-loc-multi-provider.sh
-  template: 
+  template:
-    src: sys-bkp-rmt-2-loc-multi-provider.sh.j2 
+    src: sys-bkp-rmt-2-loc-multi-provider.sh.j2
     dest: "{{docker_backup_remote_to_local_folder}}sys-bkp-rmt-2-loc-multi-provider.sh"
     mode: 0755
 
@@ -30,5 +44,5 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_backup_remote_to_local}}"
+    on_calendar: "{{on_calendar_backup_remote_to_local}}"
 

roles/svc-db-postgres/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: >-
@@ -12,17 +11,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Docker
+  - name: Docker
-      versions:
+    versions:
-        - "latest"
+    - "latest"
   galaxy_tags:
-    - postgresql
+  - postgresql
-    - docker
+  - docker
-    - database
+  - database
-    - administration
+  - administration
-    - central-database
+  - central-database
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - docker-core # Loading it here to avoid extra flush for network init

roles/svc-db-postgres/tasks/01_core.yml

@@ -1,12 +1,20 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'docker-core'
+    include_role:
+      name: docker-core
+  - set_fact:
+      run_once_svc_db_postgres: true
+  when: run_once_svc_db_postgres is not defined
 - name: Create Docker network for PostgreSQL
   community.docker.docker_network:
     name: "{{ postgres_network_name }}"
     state: present
     ipam_config:
-      - subnet: "{{ postgres_subnet }}"
+    - subnet: "{{ postgres_subnet }}"
 
 - name: "include docker-compose role"
-  include_role: 
+  include_role:
     name: docker-compose
 
 - name: Wait for Postgres inside the container
@@ -17,6 +25,6 @@
   delay: 5
 
 - name: install python-psycopg2
-  community.general.pacman: 
+  community.general.pacman:
     name: python-psycopg2
     state: present

roles/svc-opt-swapfile/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birchenbach"
   description: "Automates swapfile creation on target systems by cloning and executing a swapfile script."
@@ -9,15 +8,13 @@ galaxy_info:
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - swapfile
+  - swapfile
-    - performance
+  - performance
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/tree/main/roles/sys-opt-swapfile"
   min_ansible_version: "2.9"
   platforms:
-    - name: Any
+  - name: Any
-      versions:
+    versions:
-        - all
+    - all
-dependencies:
-  - pkgmgr-install

roles/svc-opt-swapfile/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'pkgmgr-install'
+    include_role:
+      name: pkgmgr-install
+  - set_fact:
+      run_once_svc_opt_swapfile: true
+  when: run_once_svc_opt_swapfile is not defined
 - name: "pkgmgr install"
   include_role:
     name: pkgmgr-install
@@ -6,4 +14,4 @@
 
 - name: Execute create swapfile script
   shell: swap-forge "{{swapfile_size}}"
-  become: true
+  become: true

roles/sys-alm-compose/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails."
@@ -10,18 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - systemd
+  - systemd
-    - notifier
+  - notifier
-    - telegram
+  - telegram
-    - email
+  - email
-    - notifications
+  - notifications
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-telegram
-  - sys-alm-email

roles/sys-alm-compose/tasks/main.yml

@@ -1,7 +1,17 @@
----
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-alm-telegram
+    - sys-alm-email
+  - set_fact:
+      run_once_sys_alm_compose: true
+  when: run_once_sys_alm_compose is not defined
 - name: configure sys-alm-compose.infinito@.service
-  template: 
+  template:
-    src: sys-alm-compose@.service.j2 
+    src: sys-alm-compose@.service.j2
     dest: "/etc/systemd/system/sys-alm-compose.infinito@.service"
   notify: "restart sys-alm-compose service"
   when: run_once_sys_alm_compose is not defined
@@ -9,4 +19,4 @@
 - name: run the systemd_notifier_service tasks once
   set_fact:
     run_once_sys_alm_compose: true
-  when: run_once_sys_alm_compose is not defined
+  when: run_once_sys_alm_compose is not defined

roles/sys-alm-email/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs and configures components for sending email notifications. This role is part of the sys-alm-compose suite, providing automated alerts when services fail."
@@ -10,18 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - email
+  - email
-    - systemd
+  - systemd
-    - notifications
+  - notifications
-    - automation
+  - automation
-    - msmtp
+  - msmtp
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-svc-msmtp
-  - sys-rst-daemon

roles/sys-alm-email/tasks/01_core.yml

@@ -1,3 +1,14 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-svc-msmtp
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_alm_email: true
+  when: run_once_sys_alm_email is not defined
 - name: "create {{systemd_notifier_email_folder}}"
   file:
     path: "{{systemd_notifier_email_folder}}"
@@ -6,11 +17,11 @@
 
 - name: configure sys-alm-email.sh
   template:
-    src:  sys-alm-email.sh.j2 
+    src: sys-alm-email.sh.j2
     dest: "{{systemd_notifier_email_folder}}sys-alm-email.sh"
 
 - name: configure sys-alm-email.infinito.service
-  template: 
+  template:
-    src:  sys-alm-email@.service.j2
+    src: sys-alm-email@.service.j2
     dest: /etc/systemd/system/sys-alm-email.infinito@.service
   notify: restart sys-alm-email service

roles/sys-alm-telegram/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Installs and configures components for sending Telegram notifications through systemd. This role is part of the sys-alm-compose suite, providing automated alerts when services fail."
@@ -10,17 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - telegram
+  - telegram
-    - systemd
+  - systemd
-    - notifications
+  - notifications
-    - automation
+  - automation
-    - curl
+  - curl
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-rst-daemon

roles/sys-alm-telegram/tasks/01_core.yml

@@ -1,8 +1,16 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-rst-daemon'
+    include_role:
+      name: sys-rst-daemon
+  - set_fact:
+      run_once_sys_alm_telegram: true
+  when: run_once_sys_alm_telegram is not defined
 - name: Fail if Telegram bot credentials are not set
   assert:
     that:
-      - telegram_bot_token != ""
+    - telegram_bot_token != ""
-      - telegram_chat_id != ""
+    - telegram_chat_id != ""
     fail_msg: |
       Telegram configuration is incomplete!
       Please provide non‑empty values for:
@@ -10,7 +18,7 @@
         - telegram_chat_id     # The Telegram chat ID to send messages to
 
 - name: install curl
-  community.general.pacman: 
+  community.general.pacman:
     name: curl
     state: present
 
@@ -21,12 +29,12 @@
     mode: '0755'
 
 - name: configure sys-alm-telegram.sh
-  template: 
+  template:
-    src: sys-alm-telegram.sh.j2 
+    src: sys-alm-telegram.sh.j2
     dest: "{{ systemd_telegram_script }}"
 
 - name: configure sys-alm-telegram.infinito.service
-  template: 
+  template:
-    src: sys-alm-telegram@.service.j2 
+    src: sys-alm-telegram@.service.j2
     dest: "/etc/systemd/system/sys-alm-telegram.infinito@.service"
   notify: "restart sys-alm-telegram service"

roles/sys-bkp-docker-2-loc/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automates the backup of Docker volumes to a local folder"
@@ -10,21 +9,17 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - backup
+  - backup
-    - docker
+  - docker
-    - local
+  - local
-    - systemd
+  - systemd
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
 dependencies:
-  - sys-bkp-provider
+- sys-cln-faild-bkps
-  - sys-alm-compose
-  - sys-cln-faild-bkps
-  - sys-lock
-  - sys-bkp-directory-validator

roles/sys-bkp-docker-2-loc/tasks/01_core.yml

@@ -1,3 +1,16 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-bkp-provider
+    - sys-alm-compose
+    - sys-lock
+    - sys-bkp-directory-validator
+  - set_fact:
+      run_once_sys_bkp_docker_2_loc: true
+  when: run_once_sys_bkp_docker_2_loc is not defined
 - include_tasks: 02_pkgmgr_routines.yml
   when: backup_docker_to_local_folder is not defined
 
@@ -6,13 +19,13 @@
   when: mode_reset | bool
 
 - name: configure sys-bkp-docker-2-loc-everything.infinito.service
-  template: 
+  template:
     src: sys-bkp-docker-2-loc-everything.service.j2
     dest: /etc/systemd/system/sys-bkp-docker-2-loc-everything.infinito.service
   notify: reload sys-bkp-docker-2-loc-everything.infinito.service
 
 - name: configure sys-bkp-docker-2-loc.infinito.service
-  template: 
+  template:
     src: sys-bkp-docker-2-loc.service.j2
     dest: /etc/systemd/system/sys-bkp-docker-2-loc.infinito.service
   notify: reload sys-bkp-docker-2-loc.infinito.service
@@ -25,4 +38,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_backup_docker_to_local}}"
+    on_calendar: "{{on_calendar_backup_docker_to_local}}"

roles/sys-bkp-provider/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Configures the host as a backup provider to facilitate secure backup operations."
@@ -10,18 +9,15 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - backups
+  - backups
-    - provider
+  - provider
-    - backup
+  - backup
-    - automation
+  - automation
-    - security
+  - security
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-bkp-provider-user
-  - sys-cln-bkps-timer

roles/sys-bkp-provider/tasks/main.yml

@@ -0,0 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-bkp-provider-user
+    - sys-cln-bkps-timer
+  - set_fact:
+      run_once_sys_bkp_provider: true
+  when: run_once_sys_bkp_provider is not defined

roles/sys-cli/meta/main.yml

@@ -1,24 +1,21 @@
-
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: >
     This role installs and provides the Infinito.Nexus CLI, enabling you to manage your entire Infinito.Nexus environment from the command line. After deployment, the `infinito` command is available.
   license: "Infinito.Nexus NonCommercial License (CNCL)"
   license_url: "https://s.veen.world/cncl"
-  company: | 
+  company: |
     Kevin Veen-Birkenbach
     Consulting & Coaching Solutions
     https://www.veen.world
   galaxy_tags:
-    - infinito
+  - infinito
-    - cli
+  - cli
-    - management
+  - management
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://github.com/kevinveenbirkenbach/infinito-nexus/"
   logo:
     class: "fa-solid fa-terminal"
   run_after: []
-dependencies:
-  - dev-yay

roles/sys-cli/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'dev-yay'
+    include_role:
+      name: dev-yay
+  - set_fact:
+      run_once_sys_cli: true
+  when: run_once_sys_cli is not defined
 - name: "pkgmgr install infinito"
   include_role:
     name: pkgmgr-install
@@ -7,4 +15,4 @@
 - name: Get infinito base path
   command: pkgmgr path infinito
   register: infinito_path_cmd
-  changed_when: false
+  changed_when: false

roles/sys-cln-bkps-service/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automates the cleanup of old backups by executing a Python script that deletes outdated backup versions when disk usage exceeds a specified threshold."
@@ -10,19 +9,14 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - backup
+  - backup
-    - cleanup
+  - cleanup
-    - disk
+  - disk
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:  
-  - dev-python-pip
-  - sys-alm-compose
-  - sys-lock
-  - sys-rst-daemon

roles/sys-cln-bkps-service/tasks/01_core.yml

@@ -1,8 +1,21 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-python-pip
+    - sys-alm-compose
+    - sys-lock
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_bkps_service: true
+  when: run_once_sys_cln_bkps_service is not defined
 - name: install lsof and python-psutil
   community.general.pacman:
     name:
-      - lsof
+    - lsof
-      - python-psutil
+    - python-psutil
     state: present
 
 - name: "create {{cleanup_backups_directory}}"
@@ -12,12 +25,12 @@
     mode: 0755
 
 - name: create sys-cln-backups.py
-  copy: 
+  copy:
-    src:  "sys-cln-backups.py"
+    src: "sys-cln-backups.py"
     dest: "{{cleanup_backups_directory}}sys-cln-backups.py"
 
 - name: create sys-cln-backups.infinito.service
-  template: 
+  template:
-    src:  "sys-cln-backups.service.j2"
+    src: "sys-cln-backups.service.j2"
     dest: "/etc/systemd/system/sys-cln-backups.infinito.service"
   notify: reload sys-cln-backups.infinito.service

roles/sys-cln-bkps-timer/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Schedules periodic cleanup of old backups by configuring a systemd timer to trigger the sys-cln-bkps-service role."
@@ -10,17 +9,14 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - timer
+  - timer
-    - backup
+  - backup
-    - cleanup
+  - cleanup
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-cln-bkps-service
-  - sys-rst-daemon

roles/sys-cln-bkps-timer/tasks/main.yml

@@ -1,3 +1,14 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-cln-bkps-service
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_bkps_timer: true
+  when: run_once_sys_cln_bkps_timer is not defined
 - name: set service_name to sys-cln-backups
   set_fact:
     service_name: "sys-cln-backups"
@@ -7,7 +18,7 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_cleanup_backups}}"
+    on_calendar: "{{on_calendar_cleanup_backups}}"
   when: run_once_sys_cln_bkps_timer is not defined
 
 - name: run the cleanup_backups_timer tasks once

roles/sys-cln-certs/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Automates the revocation and deletion of unused Let's Encrypt certificates"
@@ -10,19 +9,16 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - certbot
+  - certbot
-    - ssl
+  - ssl
-    - cleanup
+  - cleanup
-    - automation
+  - automation
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/certreap"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/certreap/issues"
   documentation: "https://github.com/kevinveenbirkenbach/certreap#readme"
 
-dependencies:
-  - sys-alm-compose
-  - sys-rst-daemon

roles/sys-cln-certs/tasks/01_core.yml

@@ -1,3 +1,14 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-alm-compose
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_certs: true
+  when: run_once_sys_cln_certs is not defined
 - name: "pkgmgr install"
   include_role:
     name: pkgmgr-install
@@ -18,4 +29,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{ on_calendar_cleanup_certs }}"
+    on_calendar: "{{ on_calendar_cleanup_certs }}"

roles/sys-cln-disc-space/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Frees disk space on the target system by executing a cleanup script that removes temporary files, clears package caches, and optionally handles Docker and backup cleanup."
@@ -10,18 +9,14 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - disk
+  - disk
-    - cleanup
+  - cleanup
-    - storage
+  - storage
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose
-  - sys-lock
-  - sys-rst-daemon

roles/sys-cln-disc-space/tasks/main.yml

@@ -1,3 +1,15 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-alm-compose
+    - sys-lock
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_disc_space: true
+  when: run_once_sys_cln_disc_space is not defined
 - name: "create {{cleanup_disc_space_folder}}"
   file:
     path: "{{cleanup_disc_space_folder}}"
@@ -10,7 +22,7 @@
     dest: "{{cleanup_disc_space_folder}}sys-cln-disc-space.sh"
 
 - name: create sys-cln-disc-space.infinito.service
-  template: 
+  template:
     src: sys-cln-disc-space.service.j2
     dest: /etc/systemd/system/sys-cln-disc-space.infinito.service
   notify: reload sys-cln-disc-space.infinito.service
@@ -23,4 +35,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_cleanup_disc_space}}"
+    on_calendar: "{{on_calendar_cleanup_disc_space}}"

roles/sys-cln-domains/meta/main.yml

@@ -9,17 +9,14 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - nginx
+  - nginx
-    - cleanup
+  - cleanup
-    - certbot
+  - certbot
-    - domains
+  - domains
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - srv-web-7-4-core
-  - sys-rst-daemon

roles/sys-cln-domains/tasks/main.yml

@@ -1,4 +1,14 @@
----
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - srv-web-7-4-core
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_domains: true
+  when: run_once_sys_cln_domains is not defined
 - name: Include task to remove deprecated nginx configs
   include_tasks: remove_deprecated_nginx_configs.yml
   loop: "{{ deprecated_domains }}"
@@ -7,8 +17,8 @@
   vars:
     domain: "{{ item }}"
   when:
-    - mode_cleanup | bool
+  - mode_cleanup | bool
-    - run_once_sys_cln_domains is not defined
+  - run_once_sys_cln_domains is not defined
 
 ## The revoking just works for the base domain
 #- name: "Revoke Certbot certificate for {{ item }}"

roles/sys-cln-faild-bkps/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Cleans up failed Docker backups by configuring a systemd service and timer to execute the cleanup operations periodically."
@@ -10,19 +9,14 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Linux
+  - name: Linux
-      versions:
+    versions:
-        - all
+    - all
   galaxy_tags:
-    - docker
+  - docker
-    - backup
+  - backup
-    - cleanup
+  - cleanup
-    - automation
+  - automation
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose
-  - sys-lock
-  - sys-bkp-directory-validator
-  - sys-rst-daemon

roles/sys-cln-faild-bkps/tasks/01_core.yml

@@ -1,3 +1,16 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - sys-alm-compose
+    - sys-lock
+    - sys-bkp-directory-validator
+    - sys-rst-daemon
+  - set_fact:
+      run_once_sys_cln_faild_bkps: true
+  when: run_once_sys_cln_faild_bkps is not defined
 - name: "pkgmgr install"
   include_role:
     name: pkgmgr-install
@@ -28,4 +41,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_cleanup_failed_docker}}"
+    on_calendar: "{{on_calendar_cleanup_failed_docker}}"

roles/sys-hlth-btrfs/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Health-check for Btrfs filesystems, alerts on any device error counters."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - btrfs
+  - btrfs
-    - health
+  - health
-    - systemd
+  - systemd
-    - filesystem
+  - filesystem
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-btrfs/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_btrfs: true
+  when: run_once_sys_hlth_btrfs is not defined
 - name: "create {{docker_health_btrfs_folder}}"
   file:
     path: "{{docker_health_btrfs_folder}}"
@@ -10,7 +18,7 @@
     dest: "{{docker_health_btrfs_folder}}sys-hlth-btrfs.sh"
 
 - name: create sys-hlth-btrfs.infinito.service
-  template: 
+  template:
     src: sys-hlth-btrfs.service.j2
     dest: /etc/systemd/system/sys-hlth-btrfs.infinito.service
   notify: reload sys-hlth-btrfs.infinito.service
@@ -23,4 +31,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_btrfs}}"
+    on_calendar: "{{on_calendar_health_btrfs}}"

roles/sys-hlth-csp/meta/main.yml

@@ -9,19 +9,17 @@ galaxy_info:
     https://www.veen.world
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions:
+    versions:
-        - rolling
+    - rolling
   galaxy_tags:
-    - csp
+  - csp
-    - puppeteer
+  - puppeteer
-    - health
+  - health
-    - browser
+  - browser
-    - nodejs
+  - nodejs
-    - monitoring
+  - monitoring
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   issue_tracker_url: "https://github.com/kevinveenbirkenbach/infinito-nexus/issues"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-csp/tasks/01_core.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_csp: true
+  when: run_once_sys_hlth_csp is not defined
 - name: "pkgmgr install"
   include_role:
     name: pkgmgr-install

roles/sys-hlth-disc-space/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Disk-space usage monitor; alerts when usage exceeds threshold."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - disk
+  - disk
-    - space
+  - space
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-disc-space/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_disc_space: true
+  when: run_once_sys_hlth_disc_space is not defined
 - name: "create {{health_disc_space_folder}}"
   file:
     path: "{{health_disc_space_folder}}"
@@ -10,7 +18,7 @@
     dest: "{{health_disc_space_folder}}sys-hlth-disc-space.sh"
 
 - name: create sys-hlth-disc-space.infinito.service
-  template: 
+  template:
     src: sys-hlth-disc-space.service.j2
     dest: /etc/systemd/system/sys-hlth-disc-space.infinito.service
   notify: reload sys-hlth-disc-space.infinito.service
@@ -23,4 +31,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_disc_space}}"
+    on_calendar: "{{on_calendar_health_disc_space}}"

roles/sys-hlth-docker-container/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Checks Docker containers for unhealthy or exited states and alerts on any issues."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - docker
+  - docker
-    - containers
+  - containers
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-docker-container/tasks/01_core.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_docker_container: true
+  when: run_once_sys_hlth_docker_container is not defined
 - name: "create {{health_docker_container_folder}}"
   file:
     path: "{{health_docker_container_folder}}"
@@ -10,8 +18,8 @@
     dest: "{{health_docker_container_folder}}sys-hlth-docker-container.sh"
 
 - name: create sys-hlth-docker-container.infinito.service
-  template: 
+  template:
-    src:  sys-hlth-docker-container.service.j2
+    src: sys-hlth-docker-container.service.j2
     dest: /etc/systemd/system/sys-hlth-docker-container.infinito.service
   notify: reload sys-hlth-docker-container.infinito.service
 
@@ -23,4 +31,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_docker_container}}"
+    on_calendar: "{{on_calendar_health_docker_container}}"

roles/sys-hlth-docker-volumes/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Detects anonymous Docker volumes not bound to containers (unless whitelisted) and alerts."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - docker
+  - docker
-    - volumes
+  - volumes
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-docker-volumes/tasks/01_core.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_docker_volumes: true
+  when: run_once_sys_hlth_docker_volumes is not defined
 - name: "create {{health_docker_volumes_folder}}"
   file:
     path: "{{health_docker_volumes_folder}}"
@@ -11,7 +19,7 @@
 
 - name: create sys-hlth-docker-volumes.infinito.service
   template:
-    src:  sys-hlth-docker-volumes.service.j2
+    src: sys-hlth-docker-volumes.service.j2
     dest: /etc/systemd/system/sys-hlth-docker-volumes.infinito.service
   notify: reload sys-hlth-docker-volumes.infinito.service
 
@@ -23,4 +31,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_docker_volumes}}"
+    on_calendar: "{{on_calendar_health_docker_volumes}}"

roles/sys-hlth-journalctl/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Searches the systemd journal for errors over the past day and alerts if any are found."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - journalctl
+  - journalctl
-    - logs
+  - logs
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-compose

roles/sys-hlth-journalctl/tasks/01_core.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-compose'
+    include_role:
+      name: sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_journalctl: true
+  when: run_once_sys_hlth_journalctl is not defined
 - name: "create {{health_journalctl_folder}}"
   file:
     path: "{{health_journalctl_folder}}"
@@ -10,7 +18,7 @@
     dest: "{{health_journalctl_folder}}sys-hlth-journalctl.sh"
 
 - name: create sys-hlth-journalctl.infinito.service
-  template: 
+  template:
     src: sys-hlth-journalctl.service.j2
     dest: /etc/systemd/system/sys-hlth-journalctl.infinito.service
   notify: reload sys-hlth-journalctl.infinito.service
@@ -23,4 +31,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_journalctl}}"
+    on_calendar: "{{on_calendar_health_journalctl}}"

roles/sys-hlth-msmtp/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Periodic MTA health-check: sends test mail via msmtp and alerts on failure."
@@ -10,15 +9,13 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - msmtp
+  - msmtp
-    - email
+  - email
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - sys-alm-telegram

roles/sys-hlth-msmtp/tasks/main.yml

@@ -1,3 +1,11 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependency 'sys-alm-telegram'
+    include_role:
+      name: sys-alm-telegram
+  - set_fact:
+      run_once_sys_hlth_msmtp: true
+  when: run_once_sys_hlth_msmtp is not defined
 - name: "create {{ health_msmtp_folder }}"
   file:
     path: "{{ health_msmtp_folder }}"
@@ -6,7 +14,7 @@
 
 - name: create sys-hlth-msmtp.sh
   template:
-    src:  sys-hlth-msmtp.sh.j2
+    src: sys-hlth-msmtp.sh.j2
     dest: "{{ health_msmtp_folder }}sys-hlth-msmtp.sh"
     mode: '0755'
 
@@ -24,4 +32,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar: "{{ on_calendar_health_msmtp }}"
+    on_calendar: "{{ on_calendar_health_msmtp }}"

roles/sys-hlth-webserver/meta/main.yml

@@ -1,4 +1,3 @@
----
 galaxy_info:
   author: "Kevin Veen-Birkenbach"
   description: "Checks that each Nginx domain returns its expected HTTP status and alerts on unexpected codes."
@@ -10,17 +9,14 @@ galaxy_info:
   license_url: "https://s.veen.world/cncl"
   min_ansible_version: "2.9"
   platforms:
-    - name: Archlinux
+  - name: Archlinux
-      versions: ["rolling"]
+    versions: ["rolling"]
   galaxy_tags:
-    - monitor
+  - monitor
-    - webserver
+  - webserver
-    - nginx
+  - nginx
-    - http
+  - http
-    - health
+  - health
-    - systemd
+  - systemd
   repository: "https://github.com/kevinveenbirkenbach/infinito-nexus"
   documentation: "https://docs.infinito.nexus"
-dependencies:
-  - dev-python-pip
-  - sys-alm-compose

roles/sys-hlth-webserver/tasks/01_core.yml

@@ -1,3 +1,14 @@
+- name: Load former meta dependencies once
+  block:
+  - name: Include moved dependencies
+    include_role:
+      name: '{{ item }}'
+    loop:
+    - dev-python-pip
+    - sys-alm-compose
+  - set_fact:
+      run_once_sys_hlth_webserver: true
+  when: run_once_sys_hlth_webserver is not defined
 - name: Install required Python modules
   community.general.pacman:
     name: python-requests
@@ -15,7 +26,7 @@
     dest: "{{ health_nginx_folder }}sys-hlth-webserver.py"
 
 - name: create sys-hlth-webserver.infinito.service
-  template: 
+  template:
     src: sys-hlth-webserver.service.j2
     dest: /etc/systemd/system/sys-hlth-webserver.infinito.service
   notify: reload sys-hlth-webserver.infinito.service
@@ -28,4 +39,4 @@
   include_role:
     name: sys-timer
   vars:
-    on_calendar:  "{{on_calendar_health_nginx}}"
+    on_calendar: "{{on_calendar_health_nginx}}"