From 652734b570bc728f02df99a7c570b119ddc5c4be Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Mon, 11 Aug 2025 00:32:07 +0200
Subject: Refactor: move password policy to its own role

---
 site.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'site.yml')

diff --git a/site.yml b/site.yml
index 5f48b6fb..b362ac0e 100644
--- a/site.yml
+++ b/site.yml
@@ -11,9 +11,13 @@
       tags: ["required_for_boot"]
     - role: "ssh"
       tags: ["required_for_boot"]
+    - role: "password_policy"
+      # Password policy is technically not required for boot,
+      # But it's quite nice to configure it for boot and therefore
+      # enforce the required policies/configurations wanted for the first passwrod change
+      tags: ["required_for_boot"]
     - role: "locales"
     - role: "timezone"
-    - role: "settings"
 
   pre_tasks:
     - name: "Update package cache"
-- 
cgit v1.2.3