From 2c6e1a834ab97711a402be7b49dfc2e7ae0c38c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20CAMPO?= <frederic@campo.email>
Date: Fri, 5 Jun 2026 21:13:18 +0200
Subject: [PATCH] ansible-lint cleanup

---
 playbooks/reverseproxy.yml                                      | 2 +-
 .../templates/nginx/sites-available/00-default-deny.conf.j2     | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/playbooks/reverseproxy.yml b/playbooks/reverseproxy.yml
index c372c6e..0729890 100644
--- a/playbooks/reverseproxy.yml
+++ b/playbooks/reverseproxy.yml
@@ -34,7 +34,7 @@
       ansible.builtin.include_role:
         name: geerlingguy.certbot
       loop: "{{ site | dict2items }}"
-      when: "{{ item.value.tls | default(False) }}"
+      when: "item.value.tls | default(False)"
       vars:
         certbot_admin_email: "{{ acme_account.email }}"
         certbot_install_method: package
diff --git a/playbooks/templates/nginx/sites-available/00-default-deny.conf.j2 b/playbooks/templates/nginx/sites-available/00-default-deny.conf.j2
index 135f79b..d54d233 100644
--- a/playbooks/templates/nginx/sites-available/00-default-deny.conf.j2
+++ b/playbooks/templates/nginx/sites-available/00-default-deny.conf.j2
@@ -7,7 +7,6 @@ server {
 
     server_name _;
 
-    # Self-signed or snakeoil cert just to complete the TLS handshake
     ssl_certificate /etc/letsencrypt/live/{{ item.key }}/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/{{ item.key }}/privkey.pem;