Refactor: move password policy to its own role

1 files changed, 5 insertions, 1 deletions

diff --git a/site.yml b/site.yml
index 5f48b6fb..b362ac0e 100644
--- a/site.yml
+++ b/site.yml
@@ -11,9 +11,13 @@
       tags: ["required_for_boot"]
     - role: "ssh"
       tags: ["required_for_boot"]
+    - role: "password_policy"
+      # Password policy is technically not required for boot,
+      # But it's quite nice to configure it for boot and therefore
+      # enforce the required policies/configurations wanted for the first passwrod change
+      tags: ["required_for_boot"]
     - role: "locales"
     - role: "timezone"
-    - role: "settings"
 
   pre_tasks:
     - name: "Update package cache"