fix 007

roles/firewall/tasks/firewalld.yml

@@ -14,7 +14,7 @@
     name: nftables
     enabled: false
     state: stopped
-  when: "'nftables.service' in ansible_facts['services']"
+  when: ansible_facts['services']['nftables.service']['status'] | default('not-found') != 'not-found'
 
 - name: Activer et démarrer firewalld
   ansible.builtin.systemd:

roles/firewall/tasks/nftables.yml

@@ -17,7 +17,8 @@
     - firewalld
     - iptables
     - netfilter-persistent
-  when: (item ~ '.service') in ansible_facts['services']
+  # service_facts liste aussi des unités inexistantes (status: not-found) : les ignorer.
+  when: ansible_facts['services'][item ~ '.service']['status'] | default('not-found') != 'not-found'
 
 - name: Créer le répertoire des fragments de règles
   ansible.builtin.file:

roles/os_hardening/tasks/main.yml

@@ -80,7 +80,8 @@
     state: stopped
     masked: true
   loop: "{{ os_hardening_disable_services }}"
-  when: (item ~ '.service') in ansible_facts['services']
+  # service_facts liste aussi des unités inexistantes (status: not-found) : les ignorer.
+  when: ansible_facts['services'][item ~ '.service']['status'] | default('not-found') != 'not-found'
 
 - name: Retirer les paquets aux protocoles en clair
   ansible.builtin.package: