diff --git a/roles/ansible_pull/tasks/main.yaml b/roles/ansible_pull/tasks/main.yaml
index 92c8a50..e7c614b 100644
--- a/roles/ansible_pull/tasks/main.yaml
+++ b/roles/ansible_pull/tasks/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["ansible_pull"]
   name: ensure dependencies are installed
   block:
diff --git a/roles/certbot/tasks/main.yaml b/roles/certbot/tasks/main.yaml
index 95bc69e..55b4127 100644
--- a/roles/certbot/tasks/main.yaml
+++ b/roles/certbot/tasks/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot"]
   name: ensure certbot installation
   ansible.builtin.import_tasks:
diff --git a/roles/certbot/tasks/main/cert.yaml b/roles/certbot/tasks/main/cert.yaml
index 0c21300..609d405 100644
--- a/roles/certbot/tasks/main/cert.yaml
+++ b/roles/certbot/tasks/main/cert.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-cert"]
   name: get expiry date before
   ansible.builtin.command: /usr/bin/openssl x509 -enddate -noout -in /etc/letsencrypt/live/{{ item.commonName }}/fullchain.pem
diff --git a/roles/certbot/tasks/main/certs.yaml b/roles/certbot/tasks/main/certs.yaml
index ebb0d67..7fe83c6 100644
--- a/roles/certbot/tasks/main/certs.yaml
+++ b/roles/certbot/tasks/main/certs.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-cert"]
   name: obtain http-01 challenge certificates
   loop: "{{ certbot__certificate_domains }}"
diff --git a/roles/certbot/tasks/main/http_01_cert.yaml b/roles/certbot/tasks/main/http_01_cert.yaml
index bf60062..1ea7447 100644
--- a/roles/certbot/tasks/main/http_01_cert.yaml
+++ b/roles/certbot/tasks/main/http_01_cert.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-http-01-cert"]
   name: get expiry date before
   ansible.builtin.command: /usr/bin/openssl x509 -enddate -noout -in /etc/letsencrypt/live/{{ item }}/fullchain.pem
diff --git a/roles/certbot/tasks/main/install.yaml b/roles/certbot/tasks/main/install.yaml
index 0dd9fa9..d02a989 100644
--- a/roles/certbot/tasks/main/install.yaml
+++ b/roles/certbot/tasks/main/install.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-install"]
   name: ensure relevant packages are installed
   ansible.builtin.apt:
diff --git a/roles/certbot/tasks/main/new_cert_commands.yaml b/roles/certbot/tasks/main/new_cert_commands.yaml
index cb710c5..18f4993 100644
--- a/roles/certbot/tasks/main/new_cert_commands.yaml
+++ b/roles/certbot/tasks/main/new_cert_commands.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-new_cert_commands"]
   name: ensure existence of renewal deploy hooks directory
   ansible.builtin.file:
diff --git a/roles/certbot/tasks/main/validate_cert.yaml b/roles/certbot/tasks/main/validate_cert.yaml
index 36b6c4e..cdf08f5 100644
--- a/roles/certbot/tasks/main/validate_cert.yaml
+++ b/roles/certbot/tasks/main/validate_cert.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["certbot", "certbot-validate_cert"]
   name: validate dns-01-acme-dns challenge type config
   when: item.challengeType == "dns-01-acme-dns"
diff --git a/roles/docker_compose/handlers/main.yaml b/roles/docker_compose/handlers/main.yaml
index 736743f..a4abcba 100644
--- a/roles/docker_compose/handlers/main.yaml
+++ b/roles/docker_compose/handlers/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["docker_compose"]
   name: docker compose down
   community.docker.docker_compose_v2:
diff --git a/roles/docker_compose/tasks/main.yaml b/roles/docker_compose/tasks/main.yaml
index b7b260d..a3952e8 100644
--- a/roles/docker_compose/tasks/main.yaml
+++ b/roles/docker_compose/tasks/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["docker_compose"]
   name: make sure the `/ansible_docker_compose` directory exists
   ansible.builtin.file:
diff --git a/roles/infrastructure_authorized_keys/tasks/main.yaml b/roles/infrastructure_authorized_keys/tasks/main.yaml
index 8ed1603..5c6ef1c 100644
--- a/roles/infrastructure_authorized_keys/tasks/main.yaml
+++ b/roles/infrastructure_authorized_keys/tasks/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["infrastructure_authorized_keys"]
   name: deploy infrastructure authorized keys
   ansible.posix.authorized_key:
diff --git a/roles/msmtp/tasks/main.yaml b/roles/msmtp/tasks/main.yaml
index b50f33e..655f391 100644
--- a/roles/msmtp/tasks/main.yaml
+++ b/roles/msmtp/tasks/main.yaml
@@ -1,3 +1,4 @@
+---
 - tags: ["msmtp"]
   name: ensure msmtp is installed
   ansible.builtin.apt: