fix all ansible-lint yaml errors (except for line-length)

playbooks/roles/apt_update_and_upgrade/tasks/main.yaml

@@ -1,15 +1,15 @@
 - name: update, upgrade and potentially reboot
   become: true
   block:
-  - name: apt-get update
-    ansible.builtin.apt:
-      update-cache: true
+    - name: apt-get update
+      ansible.builtin.apt:
+        update-cache: true
 
-  - name: apt-get dist-upgrade
-    ansible.builtin.apt:
-      upgrade: dist
-    register: apt_update_and_upgrade__upgrade_result
+    - name: apt-get dist-upgrade
+      ansible.builtin.apt:
+        upgrade: dist
+      register: apt_update_and_upgrade__upgrade_result
 
-  - name: reboot, after package upgrade
-    ansible.builtin.reboot:
-    when: apt_update_and_upgrade__upgrade_result.changed
+    - name: reboot, after package upgrade
+      ansible.builtin.reboot:
+      when: apt_update_and_upgrade__upgrade_result.changed

playbooks/roles/deploy_ssh_server_config/tasks/main.yaml

@@ -3,21 +3,21 @@
   become: true
 
   block:
-  - name: deploy `sshd_config`
-    ansible.builtin.template:
-      force: true
-      dest: /etc/ssh/sshd_config
-      mode: 0644
-      owner: root
-      group: root
-      src: sshd_config.j2
-    register: deploy_ssh_server_config__ssh_config_copy_result
+    - name: deploy `sshd_config`
+      ansible.builtin.template:
+        force: true
+        dest: /etc/ssh/sshd_config
+        mode: "0644"
+        owner: root
+        group: root
+        src: sshd_config.j2
+      register: deploy_ssh_server_config__ssh_config_copy_result
 
-  - name: deactivate short moduli
-    ansible.builtin.shell:
-      cmd: awk '$5 >= 3071' /etc/ssh/moduli > /etc/ssh/moduli.tmp && mv /etc/ssh/moduli.tmp /etc/ssh/moduli
+    - name: deactivate short moduli
+      ansible.builtin.shell:
+        cmd: awk '$5 >= 3071' /etc/ssh/moduli > /etc/ssh/moduli.tmp && mv /etc/ssh/moduli.tmp /etc/ssh/moduli
 
-  # Rebooting here instead of restarting the ssh service, since I don't know how Ansible reacts, when it restarts the service it probably needs for the connection.
-  - name: reboot, if ssh server config got changed
-    ansible.builtin.reboot:
-    when: deploy_ssh_server_config__ssh_config_copy_result.changed
+    # Rebooting here instead of restarting the ssh service, since I don't know how Ansible reacts, when it restarts the service it probably needs for the connection.
+    - name: reboot, if ssh server config got changed
+      ansible.builtin.reboot:
+      when: deploy_ssh_server_config__ssh_config_copy_result.changed

playbooks/roles/infrastructure_authorized_keys/tasks/main.yaml

@@ -4,4 +4,3 @@
     user: chaos
     exclusive: true
     key: https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/raw/branch/trunk/authorized_keys
-    

playbooks/roles/nextcloud/meta/main.yaml

@@ -11,10 +11,10 @@ dependencies:
   - role: nginx
     vars:
       nginx__version_spec: "{{ nextcloud__nginx_version_spec }}"
-      nginx__configurations: 
+      nginx__configurations:
         - name: "{{ nextcloud__fqdn }}"
           content: "{{ lookup('ansible.builtin.template', 'nginx_nextcloud.conf.j2') }}"
   - role: docker_compose
     vars:
       docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'compose.yaml.j2') }}"
-      docker_compose__configuration_files: []
+      docker_compose__configuration_files: [ ]

playbooks/roles/nginx/defaults/main.yaml

@@ -1,5 +1,5 @@
 nginx__deploy_redirect_conf: true
 nginx__deploy_tls_conf: true
-nginx__configurations: []
+nginx__configurations: [ ]
 nginx__use_custom_nginx_conf: false
 nginx__custom_nginx_conf: ""

playbooks/roles/nginx/tasks/main/config_deploy.yaml

@@ -11,7 +11,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/nginx.conf.ansiblesave
-        mode: 0644
+        mode: "0644"
         owner: root
         group: root
         remote_src: true
@@ -22,7 +22,7 @@
       ansible.builtin.copy:
         content: "{{ nginx__custom_nginx_conf }}"
         dest: "/etc/nginx/nginx.conf"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: root
       become: true
@@ -36,7 +36,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/nginx.conf
-        mode: 0644
+        mode: "0644"
         owner: root
         group: root
         remote_src: true
@@ -55,7 +55,7 @@
   ansible.builtin.get_url:
     force: true
     dest: /etc/nginx-mozilla-dhparam
-    mode: 0644
+    mode: "0644"
     url: https://ssl-config.mozilla.org/ffdhe2048.txt
   become: true
   notify: Restart `nginx.service`
@@ -71,7 +71,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/conf.d/tls.conf
-        mode: 0644
+        mode: "0644"
         owner: root
         group: root
         src: tls.conf
@@ -89,7 +89,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/conf.d/redirect.conf
-        mode: 0644
+        mode: "0644"
         owner: root
         group: root
         src: redirect.conf
@@ -104,7 +104,7 @@
   ansible.builtin.copy:
     content: "{{ item.content }}"
     dest: "/etc/nginx/conf.d/{{ item.name }}.conf"
-    mode: 0644
+    mode: "0644"
     owner: root
     group: root
   become: true