audit only moved to prelim

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Apr 23, 2024 · dc46e98 · dc46e98
1 parent c3aa20a
commit dc46e98
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 17 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -92,23 +92,6 @@
       - prelim_tasks
       - always
 
-- name: Include audit specific variables
-  when:
-      - run_audit or audit_only
-      - setup_audit
-  tags:
-      - setup_audit
-      - run_audit
-  ansible.builtin.include_vars: audit.yml
-
-- name: Include pre-remediation audit tasks
-  when:
-      - run_audit or audit_only
-      - setup_audit
-  tags:
-      - run_audit
-  ansible.builtin.import_tasks: pre_remediation_audit.yml
-
 - name: Run Section 1 tasks
   when:
       - amzn2023cis_section1

diff --git a/tasks/prelim.yml b/tasks/prelim.yml
@@ -3,6 +3,23 @@
 # Preliminary tasks that should always be run
 # List users in order to look files inside each home directory
 
+- name: Include audit specific variables
+  when:
+      - run_audit or audit_only
+      - setup_audit
+  tags:
+      - setup_audit
+      - run_audit
+  ansible.builtin.include_vars: audit.yml
+
+- name: Include pre-remediation audit tasks
+  when:
+      - run_audit or audit_only
+      - setup_audit
+  tags:
+      - run_audit
+  ansible.builtin.import_tasks: pre_remediation_audit.yml
+
 - name: "PRELIM | AUDIT | Interactive Users"
   tags:
       - always