fixes

ansible/arcodange/factory/playbooks/01_system.yml

@@ -165,11 +165,11 @@
                   localIp:
                     ipAllowList:
                       sourceRange:
-                      - "0.0.0.0/0"
-                    #     - "192.168.1.0/24"
-                    #     - "{{ ipify_public_ip }}/32"
+                        - "192.168.1.0/24"
+                        - "{{ ipify_public_ip }}/32"
+                        # - "0.0.0.0/0"
                       # ipStrategy:
-                      #   depth: 2
+                      #   depth: 1
             traefik_helm_values:
               deployment:
                 kind: "Deployment"

ansible/arcodange/factory/playbooks/tools/roles/hashicorp_vault/tasks/new_root_token.yml

@@ -2,7 +2,7 @@
   include_tasks: vault_cmd.yml
   vars:
     vault_cmd: '{{ item.cmd }}'
-    vault_cmd_output_var: '{{ item.save }}'
+    vault_cmd_output_var: '{{ item.save | default(false) }}'
     vault_cmd_json_attr: '{{ item.json_attr | default("") }}'
     vault_cmd_can_fail: '{{ item.can_fail | default(false) }}'
 

ansible/arcodange/factory/roles/gitea_token/tasks/main.yml

@@ -25,7 +25,7 @@
     - name: replace token
       when:
         - gitea_token_delete or gitea_api_token_cmd.rc != 0
-        - gitea_token_delete or "'access token name has been used already' in gitea_api_token_cmd.stderr"
+        - gitea_token_delete or ('access token name has been used already' in gitea_api_token_cmd.stderr)
         - gitea_token_delete or gitea_token_replace
         - gitea_api_token is defined
       block: