Ansible-lint and yamllint again

Lot of truthy variables, indentation and trailing spaces

prerequisite.yml

@@ -3,10 +3,10 @@
 
 ---
 - hosts: all
-  become: yes
+  become: true
   become_method: su
   user: root
-  gather_facts: no
+  gather_facts: false
 
   tasks:
 

roles/base/defaults/main.yml

@@ -8,23 +8,23 @@ general_technical_realm: "example.com"
 evomaintenance_realm: "example.com"
 evomaintenance_alert_email: "evomaintenance-{{ inventory_hostname }}@{{ evomaintenance_realm }}"
 evomaintenance_hostname: "{{ inventory_hostname }}.{{ general_technical_realm }}"
-evomaintenance_pg_host: Null
+evomaintenance_pg_host: null
-evomaintenance_pg_passwd: Null
+evomaintenance_pg_passwd: null
-evomaintenance_pg_db: Null
+evomaintenance_pg_db: null
-evomaintenance_pg_table: Null
+evomaintenance_pg_table: null
 evomaintenance_from_domain: "{{ evomaintenance_realm }}"
 evomaintenance_from: "evomaintenance@{{ evomaintenance_from_domain }}"
 evomaintenance_full_from: "Evomaintenance <{{ evomaintenance_from }}>"
 evomaintenance_urgency_from: mama.doe@example.com
 evomaintenance_urgency_tel: "06.00.00.00.00"
-evomaintenance_install_vendor: False
+evomaintenance_install_vendor: false
-evomaintenance_force_config: True
+evomaintenance_force_config: true
-evomaintenance_api_endpoint: Null
+evomaintenance_api_endpoint: null
-evomaintenance_api_key: Null
+evomaintenance_api_key: null
-evomaintenance_hook_api: True
+evomaintenance_hook_api: true
-evomaintenance_hook_db: False
+evomaintenance_hook_db: false
-evomaintenance_hook_commit: True
+evomaintenance_hook_commit: true
-evomaintenance_hook_mail: True
+evomaintenance_hook_mail: true
 evomaintenance_default_hosts: []
 evomaintenance_additional_hosts: []
 evomaintenance_hosts: "{{ evomaintenance_default_hosts | union(evomaintenance_additional_hosts) | unique }}"

roles/base/tasks/doas.yml

@@ -6,8 +6,6 @@
     owner: root
     group: wheel
     mode: "0640"
-    backup: no
+    backup: false
   tags:
     - doas
-
-

roles/base/tasks/dotfiles.yml

@@ -39,7 +39,7 @@
     dest: /etc/skel/.profile
     insertafter: EOF
     line: 'trap "doas /usr/share/scripts/evomaintenance.sh" 0'
-    create: yes
+    create: true
   tags:
     - admin
     - dotfiles

roles/base/tasks/evobackup.yml

@@ -6,7 +6,7 @@
     owner: root
     group: wheel
     mode: "0755"
-    force: no
+    force: false
   tags:
     - evobackup
 
@@ -16,6 +16,6 @@
     line: '#sh /usr/share/scripts/zzz_evobackup'
     owner: root
     mode: "0644"
-    create: yes
+    create: true
   tags:
     - evobackup

roles/base/tasks/evomaintenance.yml

@@ -25,6 +25,6 @@
     owner: root
     group: wheel
     mode: "0600"
-    backup: no
+    backup: false
   tags:
     - evomaintenance

roles/base/tasks/mail.yml

@@ -3,7 +3,7 @@
   lineinfile:
     path: /etc/rc.local
     line: 'date | mail -s "boot/reboot of $(hostname -s)" {{ general_alert_email }}'
-    create: yes
+    create: true
   tags:
     - misc
 
@@ -12,7 +12,7 @@
     dest: /etc/mail/aliases
     regexp: "# root:"
     replace: "root: {{ general_alert_email }}"
-    backup: no
+    backup: false
   notify:
     - newaliases
   tags:

roles/base/tasks/packages.yml

@@ -23,7 +23,7 @@
 - name: Disable sndiod
   service:
     name: sndiod
-    enabled: no
+    enabled: false
     state: stopped
   tags:
     - pkg

roles/base/tasks/sudo.yml

@@ -6,7 +6,7 @@
     insertafter: '# and set environment variables.'
     line: '%wheel   ALL=(ALL) SETENV: ALL'
     validate: 'visudo -cf %s'
-    backup: no
+    backup: false
   tags:
     - sudo
 
@@ -19,8 +19,6 @@
       Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh
       %wheel ALL=NOPASSWD: MAINT
     validate: 'visudo -cf %s'
-    backup: no
+    backup: false
   tags:
     - sudo
-
-

roles/etc-git/defaults/main.yml

@@ -1,4 +1,4 @@
 ---
 commit_message: Ansible run
 
-etc_git_monitor_status: True
+etc_git_monitor_status: true

roles/etc-git/tasks/commit.yml

@@ -3,10 +3,10 @@
   command: git status --porcelain
   args:
     chdir: /etc
-  changed_when: False
+  changed_when: false
   register: git_status
   when: not ansible_check_mode
-  ignore_errors: yes
+  ignore_errors: true
   tags:
     - etc-git
     - commit-etc
@@ -24,7 +24,7 @@
     repo: /etc
     scope: local
   register: git_config_user_email
-  ignore_errors: yes
+  ignore_errors: true
   tags:
     - etc-git
     - commit-etc
@@ -43,7 +43,7 @@
     chdir: /etc
   register: etc_commit_end_run
   when: not ansible_check_mode and git_status.stdout != ""
-  ignore_errors: yes
+  ignore_errors: true
   tags:
     - etc-git
     - commit-etc

roles/etc-git/tasks/main.yml

@@ -12,7 +12,7 @@
   args:
     chdir: /etc
     creates: /etc/.git/
-    warn: no
+    warn: false
   register: git_init
   tags:
     - etc-git
@@ -48,11 +48,11 @@
   command: "git log"
   args:
     chdir: /etc
-    warn: no
+    warn: false
-  changed_when: False
+  changed_when: false
-  failed_when: False
+  failed_when: false
   register: git_log
-  check_mode: no
+  check_mode: false
   tags:
     - etc-git
 
@@ -60,7 +60,7 @@
   shell: "git add -A . && git commit -m \"Initial commit via Ansible\""
   args:
     chdir: /etc
-    warn: no
+    warn: false
   register: git_commit
   when: git_log.rc != 0 or (git_init is defined and git_init.changed)
   tags:
@@ -72,7 +72,7 @@
     line: '/usr/local/bin/git --git-dir /etc/.git gc --quiet'
     owner: root
     mode: "0644"
-    create: yes
+    create: true
   tags:
     - etc-git
 
@@ -82,7 +82,7 @@
     line: "{{ item }}"
     owner: root
     mode: "0644"
-    create: yes
+    create: true
   when: etc_git_monitor_status
   tags:
     - etc-git

roles/evocheck/tasks/exec.yml

@@ -2,9 +2,9 @@
 - name: run evocheck
   command: "{{ evocheck_bin_dir }}/evocheck.sh"
   register: evocheck_run
-  changed_when: False
+  changed_when: false
-  failed_when: False
+  failed_when: false
-  check_mode: no
+  check_mode: false
   tags:
   - evocheck-exec
 

roles/evocheck/tasks/install.yml

@@ -15,7 +15,7 @@
     dest: "{{ evocheck_bin_dir }}/evocheck.sh"
     mode: "0700"
     owner: root
-    force: yes
+    force: true
   tags:
     - evocheck
 
@@ -23,7 +23,7 @@
   copy:
     src: evocheck.cf
     dest: /etc/evocheck.cf
-    force: no
+    force: false
   tags:
     - evocheck
 
@@ -33,6 +33,6 @@
     line: 'sh /usr/share/scripts/evocheck.sh --verbose --cron'
     owner: root
     mode: "0644"
-    create: yes
+    create: true
   tags:
     - evocheck

roles/forwarding/tasks/main.yml

@@ -4,7 +4,7 @@
     name: net.inet.ip.forwarding
     value: 1
     state: present
-    reload: yes
+    reload: true
   tags:
     - net
 
@@ -13,6 +13,6 @@
     name: net.inet6.ip6.forwarding
     value: 1
     state: present
-    reload: yes
+    reload: true
   tags:
     - net

roles/nagios-nrpe/tasks/main.yml

@@ -54,5 +54,5 @@
 - name: Starting and enabling nrpe
   service:
     name: nrpe
-    enabled: yes
+    enabled: true
     state: started

roles/openvpn/tasks/main.yml

@@ -27,7 +27,7 @@
 - name: Enabling OpenVPN
   service:
     name: openvpn
-    enabled: yes
+    enabled: true
   tags:
     - openvpn
 
@@ -39,9 +39,8 @@
 - name: Create shellpki user
   user:
     name: "_shellpki"
-    system: yes
+    system: true
     state: present
-    system: yes
     home: "/etc/shellpki/"
     shell: "/sbin/nologin"
   tags:
@@ -54,7 +53,7 @@
     owner: root
     group: wheel
     mode: "{{ item.mode }}"
-    force: yes                 
+    force: true
   with_items:
     - {src: 'files/shellpki/openssl.cnf', dest: '/etc/shellpki/openssl.cnf', mode: '0640'}
     - {src: 'files/shellpki/shellpki', dest: '/usr/local/sbin/shellpki', mode: '0755'}
@@ -103,7 +102,7 @@
     owner: root
     group: wheel
     mode: "{{ item.mode }}"
-    force: yes                 
+    force: true
   with_items:
     - {src: 'files/check_openvpn.pl', dest: '/usr/local/libexec/nagios/plugins/check_openvpn.pl', mode: '0755'}
   tags:

roles/pf/tasks/main.yml

@@ -4,4 +4,4 @@
     src: pf.conf.j2
     dest: /etc/pf.conf
     mode: "0600"
-    backup: yes
+    backup: true

tasks/commit_etc_git.yml

@@ -3,10 +3,10 @@
   command: git status --porcelain
   args:
     chdir: /etc
-  changed_when: False
+  changed_when: false
   register: git_status
   when: not ansible_check_mode
-  ignore_errors: yes
+  ignore_errors: true
   tags:
     - commit-etc
 
@@ -16,6 +16,6 @@
     chdir: /etc
   register: etc_commit_end_evolinux
   when: not ansible_check_mode and git_status.stdout != ""
-  ignore_errors: yes
+  ignore_errors: true
   tags:
     - commit-etc