diff --git a/group_vars/all/archusers.yml b/group_vars/all/archusers.yml
index 346f58dff825dbc04e26b86e3b85295de48651b4..5bcb353410f390cd0400adfade2948359d714215 100644
--- a/group_vars/all/archusers.yml
+++ b/group_vars/all/archusers.yml
@@ -1,5 +1,3 @@
----
-
 arch_groups:
   - dev
   - tu
diff --git a/group_vars/all/root_access.yml b/group_vars/all/root_access.yml
index 7cbd501bef200fc7793121fa4f4bc380b4dd9d75..300ee27df021997e136e2d8032ac8eb5dd7fee72 100644
--- a/group_vars/all/root_access.yml
+++ b/group_vars/all/root_access.yml
@@ -1,5 +1,3 @@
----
-
 # deploy tag 'sudo' when this changes
 sudo_users:
   - root
diff --git a/group_vars/buildservers.yml b/group_vars/buildservers.yml
index 3f6012aeb73896481de2845caffe080813007f35..d25815e099114b7ecc1d53d297221a4515cb3cfc 100644
--- a/group_vars/buildservers.yml
+++ b/group_vars/buildservers.yml
@@ -1,2 +1 @@
----
 enable_zram_swap: true
diff --git a/group_vars/geo_mirrors/misc.yml b/group_vars/geo_mirrors/misc.yml
index e560d4eb51c572d53a8835f02774a3a42958a954..1989aae0588276104b5317c0d1362059b7b2b398 100644
--- a/group_vars/geo_mirrors/misc.yml
+++ b/group_vars/geo_mirrors/misc.yml
@@ -1,3 +1,2 @@
----
 certbot_dns_support: true
 geo_mirror_domain: "geo.mirror.pkgbuild.com"
diff --git a/group_vars/hcloud.yml b/group_vars/hcloud.yml
index 660da174012dfe4926594cf4772bccc57bc52f80..3d60a60ed2b5e478d85ff85398b9c205a9d55dac 100644
--- a/group_vars/hcloud.yml
+++ b/group_vars/hcloud.yml
@@ -1,4 +1,3 @@
----
 enable_zram_swap: true
 configure_network: true
 dhcp: true
diff --git a/group_vars/hetzner.yml b/group_vars/hetzner.yml
index dc53f137c4d2dd48d51850487cd4566cd8e045e0..715dffa21dcb2a6e83766bd160cad009cb1dadb7 100644
--- a/group_vars/hetzner.yml
+++ b/group_vars/hetzner.yml
@@ -1,2 +1 @@
----
 configure_network: true
diff --git a/group_vars/kape_servers.yml b/group_vars/kape_servers.yml
index dc53f137c4d2dd48d51850487cd4566cd8e045e0..715dffa21dcb2a6e83766bd160cad009cb1dadb7 100644
--- a/group_vars/kape_servers.yml
+++ b/group_vars/kape_servers.yml
@@ -1,2 +1 @@
----
 configure_network: true
diff --git a/group_vars/mirrors/misc.yml b/group_vars/mirrors/misc.yml
index a424fa109db74921a3edd248d707887f9d081e3d..e64ea812b9f6e4a5830e61ae2e1377856c4f58bf 100644
--- a/group_vars/mirrors/misc.yml
+++ b/group_vars/mirrors/misc.yml
@@ -1,4 +1,3 @@
----
 archweb_db_host: "{{ hostvars['archlinux.org']['wireguard_address'] }}"
 
 # raise tcp window limits to 32MiB
diff --git a/host_vars/accounts.archlinux.org/misc b/host_vars/accounts.archlinux.org/misc
index ee5fee99ebe0eb43f52bb91dca1dc7675a520643..dcd5d9d17f9ae5585b86e601d87f660c1350673d 100644
--- a/host_vars/accounts.archlinux.org/misc
+++ b/host_vars/accounts.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.16
 wireguard_public_key: 8CbVXc2+FllLpZb/sv/csHzqaOOsasJlV0gmkIzhBXo=
diff --git a/host_vars/archlinux.org/misc b/host_vars/archlinux.org/misc
index 6c832727cae5294a6058ebf80a196812edbca05e..a314d59478ad7c9ba100e758642eea9c792c6046 100644
--- a/host_vars/archlinux.org/misc
+++ b/host_vars/archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 fetchmail_user: "donate@archlinux.org"
 fetchmail_delivery_cmd: "/usr/local/bin/donor_import_wrapper.sh"
diff --git a/host_vars/aur.archlinux.org/misc b/host_vars/aur.archlinux.org/misc
index 03b64e4a9aa892d88a4727ded756d0ee2b0dbfad..16b7689008018e691f114366338d1784e09396b1 100644
--- a/host_vars/aur.archlinux.org/misc
+++ b/host_vars/aur.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 memcached_socket: "/run/memcached/aurweb.sock"
 wireguard_address: 10.0.0.2
diff --git a/host_vars/bbs.archlinux.org/misc b/host_vars/bbs.archlinux.org/misc
index 4e008f1983f0b10ce030980f08ee201217436092..9f1d8614cca82384cf4463ebad4e5b96b1857dd2 100644
--- a/host_vars/bbs.archlinux.org/misc
+++ b/host_vars/bbs.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.17
 wireguard_public_key: i65GF9BaoTDvTXLJBpZWbuu2jV3F2mc0tH16Y6cQY1g=
diff --git a/host_vars/bugs.archlinux.org/misc b/host_vars/bugs.archlinux.org/misc
index 7357f94d813434c63a19e97f21e265c351af9151..8bd008ceb86620a953b2211a873373a2ff6a7ab8 100644
--- a/host_vars/bugs.archlinux.org/misc
+++ b/host_vars/bugs.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.19
 wireguard_public_key: Y5sWHwa/Hy6A7ga6lOU8uD/i/ZHZEBlkw2EW/CFE4ys=
diff --git a/host_vars/build.archlinux.org/misc b/host_vars/build.archlinux.org/misc
index c3950e88302528b75ba747cd89420fc6826c1a8a..a6f684209c9d3168cbb40e013a652330e1976d12 100644
--- a/host_vars/build.archlinux.org/misc
+++ b/host_vars/build.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 hostname: "build.archlinux.org"
 network_interface: "enp195s0"
 ipv4_address: "135.181.138.48"
diff --git a/host_vars/dashboards.archlinux.org/misc b/host_vars/dashboards.archlinux.org/misc
index 59ce6cb73df8ff51ec137005e552c135c587bda0..24ec725ab901b7ab90ff9aaa07542e923c54db3c 100644
--- a/host_vars/dashboards.archlinux.org/misc
+++ b/host_vars/dashboards.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 ipv4_address: 157.90.255.107
 wireguard_address: 10.0.0.33
diff --git a/host_vars/debuginfod.archlinux.org/misc b/host_vars/debuginfod.archlinux.org/misc
index 276d2e4d9295c66b7e34ef085730216a8222614c..24c6fcf8a6292f3765303dfaccff37fb7b006208 100644
--- a/host_vars/debuginfod.archlinux.org/misc
+++ b/host_vars/debuginfod.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 ipv4_address: 168.119.240.111
 ipv6_address: 2a01:4f8:c010:74d4::1
diff --git a/host_vars/gemini.archlinux.org/misc b/host_vars/gemini.archlinux.org/misc
index f92791e5b6a240528d3cef9e42df678caad60ea0..fe4635ccfb2a563dd1672adc9d25f429f09ebcca 100644
--- a/host_vars/gemini.archlinux.org/misc
+++ b/host_vars/gemini.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 hostname: "gemini.archlinux.org"
 
 ipv4_address: "49.12.124.107"
diff --git a/host_vars/gitlab.archlinux.org/misc b/host_vars/gitlab.archlinux.org/misc
index a7e76c3f6a1dadedbb5209bed0a2041cfcbf6dc3..1b9afc962e99413a1273cc82453b92bf494eabeb 100644
--- a/host_vars/gitlab.archlinux.org/misc
+++ b/host_vars/gitlab.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 additional_addresses: ["116.203.6.156/32", "2a01:4f8:c2c:5d2d::2/64"]
 wireguard_address: 10.0.0.5
diff --git a/host_vars/gluebuddy.archlinux.org/misc b/host_vars/gluebuddy.archlinux.org/misc
index 0b4f7998313d2cf0dbe680b5e6fd6b703cd349c6..71dafc5ef31e8fbf9c5472100a999dbb78f20567 100644
--- a/host_vars/gluebuddy.archlinux.org/misc
+++ b/host_vars/gluebuddy.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.36
 wireguard_public_key: iiwiHp6b9fmepXLNZ0xFMWIhF2u2a8oEpQI1TTDR4zI=
diff --git a/host_vars/homedir.archlinux.org/misc b/host_vars/homedir.archlinux.org/misc
index a33b1f96977a4b699784df5edfcd635971b66dc2..2cedefb561de20b19bc5dd6de7412b327e020468 100644
--- a/host_vars/homedir.archlinux.org/misc
+++ b/host_vars/homedir.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.13
 wireguard_public_key: 0MrXhX6fmtetZ1Rnu93+rQ8yWgOmxrwyY/hXSsy98FI=
diff --git a/host_vars/lists.archlinux.org/misc b/host_vars/lists.archlinux.org/misc
index 3bd31fe7836ec77bc1295f5ea8eb7647fc6330bf..fb2145d86f2da72c1683cd057eb2d177428bb434 100644
--- a/host_vars/lists.archlinux.org/misc
+++ b/host_vars/lists.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 ipv4_address: 95.217.236.249
 zram_fraction: 1.0
diff --git a/host_vars/mailman3.archlinux.org/misc b/host_vars/mailman3.archlinux.org/misc
index c8bb8a76d1d0802116bbca118b89e60c5cd982be..01d1a3f5b5833b6f0da0e77139dbb5d3c37b1af5 100644
--- a/host_vars/mailman3.archlinux.org/misc
+++ b/host_vars/mailman3.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 ipv4_address: 65.21.106.94
 wireguard_address: 10.0.0.37
diff --git a/host_vars/man.archlinux.org/misc b/host_vars/man.archlinux.org/misc
index 449f63d977f2116738553b9f7cac4fbc385a439d..20670b4f345936811a66efe8286f09173f240410 100644
--- a/host_vars/man.archlinux.org/misc
+++ b/host_vars/man.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 fail2ban_jails:
   sshd: true
diff --git a/host_vars/matrix.archlinux.org/misc b/host_vars/matrix.archlinux.org/misc
index e001c817a1a606beadd8b872b6520a7980ee86dc..a55baad62a12441ba8e1e40347e45c3ed781c751 100644
--- a/host_vars/matrix.archlinux.org/misc
+++ b/host_vars/matrix.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 static_dns: true
 wireguard_address: 10.0.0.15
diff --git a/host_vars/md.archlinux.org/misc b/host_vars/md.archlinux.org/misc
index f4888eb5c9b6e274f7caf9299a8f4aab752af7b5..eeb99d450ccb0b5bc83d62ff3294c909d32cf3b3 100644
--- a/host_vars/md.archlinux.org/misc
+++ b/host_vars/md.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.31
 wireguard_public_key: eCIzf+ckdWPvJYjNaxdlLRH9kq9mfJZswA8KwCmtJgQ=
diff --git a/host_vars/mirror.pkgbuild.com/misc b/host_vars/mirror.pkgbuild.com/misc
index 1663410dd031d63e5835868ca0f72dbc108bc897..ea0bc5a84b74d62a3a5e6cd4b36ffa8542342c43 100644
--- a/host_vars/mirror.pkgbuild.com/misc
+++ b/host_vars/mirror.pkgbuild.com/misc
@@ -1,4 +1,3 @@
----
 mirror_domain: mirror.pkgbuild.com
 mirror_debug_packages: false
 archweb_mirrorcheck_locations: [20, 21]
diff --git a/host_vars/monitoring.archlinux.org/misc b/host_vars/monitoring.archlinux.org/misc
index 31cf2745d33d1d30da2c0089d4606f65281c3210..6103dd420c1d49b392dc13ce6276c62e3f4957f1 100644
--- a/host_vars/monitoring.archlinux.org/misc
+++ b/host_vars/monitoring.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 ipv4_address: 95.217.220.31
 wireguard_address: 10.0.0.4
diff --git a/host_vars/packer-base-image b/host_vars/packer-base-image
index 29cd7e8df52899559855e99570d0bd019f5d9ec4..938ab91301a22087444d3b4f2d66826cb6cac446 100644
--- a/host_vars/packer-base-image
+++ b/host_vars/packer-base-image
@@ -1,4 +1,3 @@
----
 hostname: "archlinux-packer"
 
 dhcp: true
diff --git a/host_vars/patchwork.archlinux.org/misc b/host_vars/patchwork.archlinux.org/misc
index 6705ccfe8ea8d34e3e111e451432c529c137f644..a3fcbeb20c3b1b125d72bd9605f7fabe13fa603b 100644
--- a/host_vars/patchwork.archlinux.org/misc
+++ b/host_vars/patchwork.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 memcached_socket: "/run/memcached/patchwork.sock"
 fetchmail_user: "patchwork@archlinux.org"
diff --git a/host_vars/phrik.archlinux.org/misc b/host_vars/phrik.archlinux.org/misc
index 09da18b39d1ea327da4214736b2ed70cd5b39c71..63bef3a1535da18a6bbe732c9cc42066ac8a84d4 100644
--- a/host_vars/phrik.archlinux.org/misc
+++ b/host_vars/phrik.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 arch_users:
   demize:
diff --git a/host_vars/quassel.archlinux.org/misc b/host_vars/quassel.archlinux.org/misc
index 79e5df913c69d9cec509bc0e6c064314bc3b4008..b5f206f0eaf6144cb64c612e4a11e94323ec0dad 100644
--- a/host_vars/quassel.archlinux.org/misc
+++ b/host_vars/quassel.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.10
 wireguard_public_key: 4SFiwJRHbGSDtEypEDhS6ar2jmwfBwthPSGHZ8XShXY=
diff --git a/host_vars/redirect.archlinux.org/misc b/host_vars/redirect.archlinux.org/misc
index ce24a877c423ca713852a3e505bbc6615e547cdc..8056762cbf470ff48441683eb0716ecacb89483e 100644
--- a/host_vars/redirect.archlinux.org/misc
+++ b/host_vars/redirect.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.25
 wireguard_public_key: n11Ps2sc0Cxsi1sLaYFq7dkhlDtTnOZCGovRYbzDGR8=
diff --git a/host_vars/repro1.pkgbuild.com/misc b/host_vars/repro1.pkgbuild.com/misc
index 8e917110f96dcf9135670850897a56d4d1db6170..61bccbd1c0fb6ff5ddf21ac0b0a2ba81b046c4fe 100644
--- a/host_vars/repro1.pkgbuild.com/misc
+++ b/host_vars/repro1.pkgbuild.com/misc
@@ -1,4 +1,3 @@
----
 hostname: "repro1.pkgbuild.com"
 
 ipv4_address: "147.75.81.79"
diff --git a/host_vars/reproducible.archlinux.org/misc b/host_vars/reproducible.archlinux.org/misc
index 5598bcb3b628708fcc70d0e17f346093a2e1f78a..4b65753f38fcab6abe4559cf89069d0c6f5a89fb 100644
--- a/host_vars/reproducible.archlinux.org/misc
+++ b/host_vars/reproducible.archlinux.org/misc
@@ -1,5 +1,3 @@
----
-
 filesystem: btrfs
 wireguard_address: 10.0.0.6
 wireguard_public_key: F2X4lMxdET35mceNtRVqSxVVbwEUVey5IjveG0yHJ0Q=
diff --git a/host_vars/runner2.archlinux.org/misc b/host_vars/runner2.archlinux.org/misc
index 8d2e62a9e6c4382c3acdd5fbd1f744b617aba7ff..af6388953a1d00a3ded5e93f919f689a4275ee29 100644
--- a/host_vars/runner2.archlinux.org/misc
+++ b/host_vars/runner2.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 hostname: "runner2.archlinux.org"
 
 ipv4_address: "147.75.80.217"
diff --git a/host_vars/secure-runner1.archlinux.org/misc b/host_vars/secure-runner1.archlinux.org/misc
index 8dd2ec7ac388d924c7087ddfd0b376b680ba3f1f..90e3245dbab06ae3715eb8d5879e5f413d31a44b 100644
--- a/host_vars/secure-runner1.archlinux.org/misc
+++ b/host_vars/secure-runner1.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 hostname: "secure-runner1.archlinux.org"
 
 ipv4_address: "116.202.134.150"
diff --git a/host_vars/security.archlinux.org/misc b/host_vars/security.archlinux.org/misc
index 02b3f31ddbf7ffc81fbf6f0c141bf7d088479e74..9bfa16e84002b5a757a3ee470f30596ae3ec8a6f 100644
--- a/host_vars/security.archlinux.org/misc
+++ b/host_vars/security.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 
 fail2ban_jails:
diff --git a/host_vars/state.archlinux.org/misc b/host_vars/state.archlinux.org/misc
index 12684443e326eaa068de5da391d3486f150b8867..4498f83814645f0fb4b7e183847008acffc804c9 100644
--- a/host_vars/state.archlinux.org/misc
+++ b/host_vars/state.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 wireguard_address: 10.0.0.11
 wireguard_public_key: cRNS30527OCEgijC7FHrtdXxdNnwWsXP8F1QAoKgAFQ=
diff --git a/host_vars/wiki.archlinux.org/misc b/host_vars/wiki.archlinux.org/misc
index cfca7602ba0688b145b872ba28fa2707441b2ab8..cef9a41b2a608651d724bce4f82b115dad377b89 100644
--- a/host_vars/wiki.archlinux.org/misc
+++ b/host_vars/wiki.archlinux.org/misc
@@ -1,4 +1,3 @@
----
 filesystem: btrfs
 memcached_socket: "/run/memcached/archwiki.sock"
 
diff --git a/one-shots/keycloak-importer/archusers.yml b/one-shots/keycloak-importer/archusers.yml
index 00ea18293e8a718b9f01388f611d5f2f6368efb9..c695ad763f71059555020b1cd658a7b1b932c807 100644
--- a/one-shots/keycloak-importer/archusers.yml
+++ b/one-shots/keycloak-importer/archusers.yml
@@ -1,5 +1,3 @@
----
-
 arch_groups:
   - dev
   - tu
diff --git a/playbooks/accounts.archlinux.org.yml b/playbooks/accounts.archlinux.org.yml
index a354925db1a736f4200990f132d10845410d5926..5425e687489e9a23c8d588b7665e4a428539cb41 100644
--- a/playbooks/accounts.archlinux.org.yml
+++ b/playbooks/accounts.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup Keycloak server
   hosts: accounts.archlinux.org
   remote_user: root
diff --git a/playbooks/all-hosts-basic.yml b/playbooks/all-hosts-basic.yml
index 8aab197e74c582ca601b532647880d7f4329dd6f..387fe203bd38ff88a30e87b9b26c2a5bc2ae5278 100644
--- a/playbooks/all-hosts-basic.yml
+++ b/playbooks/all-hosts-basic.yml
@@ -1,5 +1,3 @@
----
-
 - name: basic setup for all hosts
   hosts: all
   remote_user: root
diff --git a/playbooks/archive-mirrors.yml b/playbooks/archive-mirrors.yml
index dabc6ca24d10e5cf5ce47a2c020ec4c69e2e0335..5d4518be053b62f4ff2a9d07eec307636a1ba930 100644
--- a/playbooks/archive-mirrors.yml
+++ b/playbooks/archive-mirrors.yml
@@ -1,4 +1,3 @@
----
 - name: common playbook for archive-mirrors
   hosts: archive_mirrors
   remote_user: root
diff --git a/playbooks/archlinux.org.yml b/playbooks/archlinux.org.yml
index 9b72b7be795c5da07f520261b1f5edec9db7df5e..ec22de8b291ab32b16138f495eaebb0340e42879 100644
--- a/playbooks/archlinux.org.yml
+++ b/playbooks/archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: "prepare postgres ssl hosts list"
   hosts: archlinux.org
   tasks:
diff --git a/playbooks/aur.archlinux.org.yml b/playbooks/aur.archlinux.org.yml
index c83f223111911e6df589b17c607ca6acf89ddfb7..787f94ea878c76f57252fc6ec669f0c07d0bbfa9 100644
--- a/playbooks/aur.archlinux.org.yml
+++ b/playbooks/aur.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup aur.archlinux.org
   hosts: aur.archlinux.org
   remote_user: root
diff --git a/playbooks/bbs.archlinux.org.yml b/playbooks/bbs.archlinux.org.yml
index b4d42be3d43afa4cbd3e0ee55e82da0705d221a8..72102d2c478f337fda674eb66426a9c293bbed5c 100644
--- a/playbooks/bbs.archlinux.org.yml
+++ b/playbooks/bbs.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup bbs.archlinux.org
   hosts: bbs.archlinux.org
   remote_user: root
diff --git a/playbooks/bugs.archlinux.org.yml b/playbooks/bugs.archlinux.org.yml
index af39d94488037513f33bbc82f4ad938591d4fe2e..0bb89df30c9d7c96fddd6461fb6013bc1a61bc95 100644
--- a/playbooks/bugs.archlinux.org.yml
+++ b/playbooks/bugs.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup bugs.archlinux.org
   hosts: bugs.archlinux.org
   remote_user: root
diff --git a/playbooks/build.archlinux.org.yml b/playbooks/build.archlinux.org.yml
index b150e90fc182f43c17fa99d39bba1e95390d5102..5b2719f046d1d857850ce683663233e449a7e312 100644
--- a/playbooks/build.archlinux.org.yml
+++ b/playbooks/build.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup build.archlinux.org
   hosts: build.archlinux.org
   remote_user: root
diff --git a/playbooks/debuginfod.archlinux.org.yml b/playbooks/debuginfod.archlinux.org.yml
index f799ef4ae5ef5dfe15787344cf145d987c3af33b..a78c970903152fef45243a8ea5edae14c569f5d9 100644
--- a/playbooks/debuginfod.archlinux.org.yml
+++ b/playbooks/debuginfod.archlinux.org.yml
@@ -1,4 +1,3 @@
----
 - name: setup debuginfod.archlinux.org
   hosts: debuginfod.archlinux.org
   remote_user: root
diff --git a/playbooks/gemini.archlinux.org.yml b/playbooks/gemini.archlinux.org.yml
index e26ad49d884079487010300c1f2d314009ef7211..a6659518ace6671ad4a19d908387f45ee4c4f136 100644
--- a/playbooks/gemini.archlinux.org.yml
+++ b/playbooks/gemini.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup gemini.archlinux.org
   hosts: gemini.archlinux.org
   remote_user: root
diff --git a/playbooks/gitlab-runners.yml b/playbooks/gitlab-runners.yml
index 2f86dfb1f847d9f32ce5a04145ae0a32fd5c1b03..a619354c373fd23e78db866784379e6d0db6eacd 100644
--- a/playbooks/gitlab-runners.yml
+++ b/playbooks/gitlab-runners.yml
@@ -1,4 +1,3 @@
----
 - name: setup gitlab-runners
   hosts: gitlab_runners
   remote_user: root
diff --git a/playbooks/gitlab.archlinux.org.yml b/playbooks/gitlab.archlinux.org.yml
index b5847e3973ba50b7268e013ab1db2353ad03a055..0df29a54200032e4abefa8f377f634f3e3fce84b 100644
--- a/playbooks/gitlab.archlinux.org.yml
+++ b/playbooks/gitlab.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup gitlab server
   hosts: gitlab.archlinux.org
   remote_user: root
diff --git a/playbooks/gluebuddy.archlinux.org.yml b/playbooks/gluebuddy.archlinux.org.yml
index de3e5b0f742288bac870278430e826af7dbc27b6..a6da7933feea1733782a7b8b3f33870fc2f9698a 100644
--- a/playbooks/gluebuddy.archlinux.org.yml
+++ b/playbooks/gluebuddy.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup gluebuddy.archlinux.org
   hosts: gluebuddy.archlinux.org
   remote_user: root
diff --git a/playbooks/hetzner_storagebox.yml b/playbooks/hetzner_storagebox.yml
index fcdb7efe994f39eb0c72a47cb484e38e7136e823..d0de542724fa449cd4f25784844d3fa75971c576 100644
--- a/playbooks/hetzner_storagebox.yml
+++ b/playbooks/hetzner_storagebox.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup Hetzner storagebox account
   hosts: localhost
   gather_facts: false
diff --git a/playbooks/homedir.archlinux.org.yml b/playbooks/homedir.archlinux.org.yml
index f1d5294f6a447a55c3a64553aa5d93aaa6c190d0..9afc659490a8ed11019ddf41b45e8cad6447bf41 100644
--- a/playbooks/homedir.archlinux.org.yml
+++ b/playbooks/homedir.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup homedir.archlinux.org
   hosts: homedir.archlinux.org
   remote_user: root
diff --git a/playbooks/man.archlinux.org.yml b/playbooks/man.archlinux.org.yml
index 6a1535e930b6cd7d6c829f9c9cc24b54deaaa06d..2481e80c82ec17b96a811672cbd0ff1994e8c392 100644
--- a/playbooks/man.archlinux.org.yml
+++ b/playbooks/man.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup man.archlinux.org
   hosts: man.archlinux.org
   remote_user: root
diff --git a/playbooks/matrix.archlinux.org.yml b/playbooks/matrix.archlinux.org.yml
index d7c2be1d9550bcb69fb207f2b8c538c1b1663adf..cda2c872008152fddd23363cb35ac24876f29c36 100644
--- a/playbooks/matrix.archlinux.org.yml
+++ b/playbooks/matrix.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup matrix
   hosts: matrix.archlinux.org
   remote_user: root
diff --git a/playbooks/md.archlinux.org.yml b/playbooks/md.archlinux.org.yml
index 565ece24942485970bc9f7d1ad09f9941d1d8146..dbd20b96ae2fd2f254406b7a5f8a61071b65a522 100644
--- a/playbooks/md.archlinux.org.yml
+++ b/playbooks/md.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup hedgedoc server
   hosts: md.archlinux.org
   remote_user: root
diff --git a/playbooks/mirrors.yml b/playbooks/mirrors.yml
index 5e562e6add24e788c39e6ef842e4a87e2015a55f..68a1b75d30bf9f70247eb8e1e69243ad7c9e1cc6 100644
--- a/playbooks/mirrors.yml
+++ b/playbooks/mirrors.yml
@@ -1,4 +1,3 @@
----
 - name: common playbook for mirrors
   hosts: mirrors
   remote_user: root
diff --git a/playbooks/patchwork.archlinux.org.yml b/playbooks/patchwork.archlinux.org.yml
index c68ca5f59ecf142c4f2289725f627683a59be469..afd8d892ca2ac35841539679b5dfd1d52e9c5289 100644
--- a/playbooks/patchwork.archlinux.org.yml
+++ b/playbooks/patchwork.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup patchwork.archlinux.org
   hosts: patchwork.archlinux.org
   remote_user: root
diff --git a/playbooks/phrik.yml b/playbooks/phrik.yml
index ac912955def477b6e9d834020bcb81ee49314e12..4da2d28f600c8e030dee3809a7ff42db4983d1be 100644
--- a/playbooks/phrik.yml
+++ b/playbooks/phrik.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup phrik bot server
   hosts: phrik.archlinux.org
   remote_user: root
diff --git a/playbooks/quassel.archlinux.org.yml b/playbooks/quassel.archlinux.org.yml
index 7674a80636fe0ebe02a4959aa2ced2fd2b094a6c..d7fd34a9c79230d36f2646e8a8eaaf75d51cb9f2 100644
--- a/playbooks/quassel.archlinux.org.yml
+++ b/playbooks/quassel.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup quassel server
   hosts: quassel.archlinux.org
   remote_user: root
diff --git a/playbooks/rebuilderd-workers.yml b/playbooks/rebuilderd-workers.yml
index c92c0f27c577f388d6a962c8777523a7d0dfbd69..a7b88f5c38f9915234a5f06e74369f7a1f822439 100644
--- a/playbooks/rebuilderd-workers.yml
+++ b/playbooks/rebuilderd-workers.yml
@@ -1,5 +1,3 @@
----
-
 - name: common playbook for rebuilderd_workers
   hosts: rebuilderd_workers
   remote_user: root
diff --git a/playbooks/reproducible.archlinux.org.yml b/playbooks/reproducible.archlinux.org.yml
index 6fe30895c90cb715f61ca7587eaa86861e4dd118..0942f810b7691ae8982a53fcb49107af97546f6c 100644
--- a/playbooks/reproducible.archlinux.org.yml
+++ b/playbooks/reproducible.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup reproducible builds rebuilder
   hosts: reproducible.archlinux.org
   remote_user: root
diff --git a/playbooks/rsync.net.yml b/playbooks/rsync.net.yml
index c3cc58b673a47bc6bdf3d108a2c1ed9a1c16e444..045e2e8550a4dc9be5865b72d65649db7dd7dee5 100644
--- a/playbooks/rsync.net.yml
+++ b/playbooks/rsync.net.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup rsync.net account
   hosts: localhost
   gather_facts: false
diff --git a/playbooks/security.archlinux.org.yml b/playbooks/security.archlinux.org.yml
index 74f13e91fcb93b1ecca9664308f93649339b1efe..77aa612c82bad9e93bb63d2ec08895906caf3754 100644
--- a/playbooks/security.archlinux.org.yml
+++ b/playbooks/security.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup security.archlinux.org
   hosts: security.archlinux.org
   remote_user: root
diff --git a/playbooks/state.archlinux.org.yml b/playbooks/state.archlinux.org.yml
index 38def502ed07f1182f9f73720f01c459b0ce7da3..1d7e7948ce0f72741876a43fe8160d8eaf621b2f 100644
--- a/playbooks/state.archlinux.org.yml
+++ b/playbooks/state.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup state.archlinux.org (terraform state store)
   hosts: state.archlinux.org
   remote_user: root
diff --git a/playbooks/tasks/fetch-borg-keys.yml b/playbooks/tasks/fetch-borg-keys.yml
index e1ffde4a2ecedb88293918561bf6026b1ad6a1b2..a361a11c6fdad98da61f9980e2e7b78b0b37a846 100644
--- a/playbooks/tasks/fetch-borg-keys.yml
+++ b/playbooks/tasks/fetch-borg-keys.yml
@@ -1,5 +1,3 @@
----
-
 - name: prepare local storage directory
   hosts: localhost
   tasks:
diff --git a/playbooks/tasks/include/reencrypt-vault-key.yml b/playbooks/tasks/include/reencrypt-vault-key.yml
index 26f862acb4bfec08f5941bfc96461f5742f2ca1b..234c5a0cfae5523e192d69dcff0012f9bb0ae262 100644
--- a/playbooks/tasks/include/reencrypt-vault-key.yml
+++ b/playbooks/tasks/include/reencrypt-vault-key.yml
@@ -1,5 +1,3 @@
----
-
 - name: check if moreutils is installed
   pacman: name=moreutils state=present
 
diff --git a/playbooks/tasks/include/upgrade-server.yml b/playbooks/tasks/include/upgrade-server.yml
index 0f022894af60c3033473a812c534c3862f68ede6..258423b70cbd0680ae9741dcc118d9fefd729047 100644
--- a/playbooks/tasks/include/upgrade-server.yml
+++ b/playbooks/tasks/include/upgrade-server.yml
@@ -1,5 +1,3 @@
----
-
 - name: ensure latest keyring
   pacman:
     name: archlinux-keyring
diff --git a/playbooks/tasks/install_arch.yml b/playbooks/tasks/install_arch.yml
index aa1c5107f6ec907c97224286a70a1dc2d06648e2..6f4b9d72f73982251df45eb548cbb343b0dab7b4 100644
--- a/playbooks/tasks/install_arch.yml
+++ b/playbooks/tasks/install_arch.yml
@@ -1,5 +1,3 @@
----
-
 # This script is for provisioning a server for first boot.
 # Care: It is not idempotent by design.
 
diff --git a/playbooks/tasks/pacman-website.yml b/playbooks/tasks/pacman-website.yml
index 0b1cf6a983a4ee31cfbe9d326ddc9a39fb867961..a64d9549ae57841ae366b41370d595fbcf52f7a3 100644
--- a/playbooks/tasks/pacman-website.yml
+++ b/playbooks/tasks/pacman-website.yml
@@ -1,5 +1,3 @@
----
-
 - name: Update pacman website
   hosts: localhost
   vars:
diff --git a/playbooks/tasks/reencrypt-vault-default-key.yml b/playbooks/tasks/reencrypt-vault-default-key.yml
index e9a33fa1d599b6759c36c927f258a6f341c91767..33d8206871eba4df5113558e27f8e69ef9b7e0f7 100644
--- a/playbooks/tasks/reencrypt-vault-default-key.yml
+++ b/playbooks/tasks/reencrypt-vault-default-key.yml
@@ -1,5 +1,3 @@
----
-
 - name: reencrypt vault default key
   hosts: localhost
   tasks:
diff --git a/playbooks/tasks/reencrypt-vault-super-key.yml b/playbooks/tasks/reencrypt-vault-super-key.yml
index 6dc0bf30db7c15d530644c68de504bd9a0a4eb9c..33fd5eb30e928df8c5829ce331b7d45683dd8f5a 100644
--- a/playbooks/tasks/reencrypt-vault-super-key.yml
+++ b/playbooks/tasks/reencrypt-vault-super-key.yml
@@ -1,5 +1,3 @@
----
-
 - name: reencrypt vault super key
   hosts: localhost
   tasks:
diff --git a/playbooks/tasks/sync-ssh-hostkeys.yml b/playbooks/tasks/sync-ssh-hostkeys.yml
index f4ce684e61e8510f06dea65c35e161ecdcdb9f1f..574e1f99cebbd98dbd3f845bd17b273481acef05 100644
--- a/playbooks/tasks/sync-ssh-hostkeys.yml
+++ b/playbooks/tasks/sync-ssh-hostkeys.yml
@@ -1,5 +1,3 @@
----
-
 - name: fetch ssh hostkeys
   hosts: all
   gather_facts: false
diff --git a/playbooks/tasks/upgrade-servers.yml b/playbooks/tasks/upgrade-servers.yml
index 8b51b8532bf79ae1e0576cb808524a3acde1b0a6..d1478738e0a9b9d020848c7afdc23298eb060160 100644
--- a/playbooks/tasks/upgrade-servers.yml
+++ b/playbooks/tasks/upgrade-servers.yml
@@ -1,5 +1,3 @@
----
-
 - name: upgrade and reboot all hetzner servers
   hosts: all,!kape_servers,!packet_net
   max_fail_percentage: 0
diff --git a/playbooks/wiki.archlinux.org.yml b/playbooks/wiki.archlinux.org.yml
index 03bb8b659b10beb2ff85a668642d9ed1aeb0cbfd..41b1b8fddf885f53a50a55b5d3ccc26511f80f71 100644
--- a/playbooks/wiki.archlinux.org.yml
+++ b/playbooks/wiki.archlinux.org.yml
@@ -1,5 +1,3 @@
----
-
 - name: setup wiki.archlinux.org
   hosts: wiki.archlinux.org
   remote_user: root
diff --git a/roles/acme_dns_challenge/handlers/main.yml b/roles/acme_dns_challenge/handlers/main.yml
index ee953235084233b13220d92752900f740d077485..d889effb95e68108d57d1f18a299e9448fb178b4 100644
--- a/roles/acme_dns_challenge/handlers/main.yml
+++ b/roles/acme_dns_challenge/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart powerdns
   service: name=pdns state=restarted
diff --git a/roles/acme_dns_challenge/tasks/main.yml b/roles/acme_dns_challenge/tasks/main.yml
index 77e21e66f38235b8b83515860ae507ac01687c18..c79aea6816eae82472754b0fd9bdcdffd8122b6f 100644
--- a/roles/acme_dns_challenge/tasks/main.yml
+++ b/roles/acme_dns_challenge/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install powerdns
   pacman: name=powerdns state=present
 
diff --git a/roles/alertmanager/handlers/main.yml b/roles/alertmanager/handlers/main.yml
index 93afa9664cc6a31e22b061a2a0d655293f386cd3..bfb1d46931ef97f2fd2bdf0d6aa74eaca93c71e3 100644
--- a/roles/alertmanager/handlers/main.yml
+++ b/roles/alertmanager/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload alertmanager
   service: name=alertmanager state=reloaded
diff --git a/roles/alertmanager/tasks/main.yml b/roles/alertmanager/tasks/main.yml
index 4bf252a2674474291b21f92fdb0b1fd271619479..b35c228e116a129d97954e703bbcf694d48a26b7 100644
--- a/roles/alertmanager/tasks/main.yml
+++ b/roles/alertmanager/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install alertmanager server
   pacman: name=alertmanager state=present
 
diff --git a/roles/arch_boxes_sync/tasks/main.yml b/roles/arch_boxes_sync/tasks/main.yml
index 0f2eacc1a170f92dcf69d28b5a867e49933a4979..98d43e789ad4d141267973e7cb40d6e3bb3a0106 100644
--- a/roles/arch_boxes_sync/tasks/main.yml
+++ b/roles/arch_boxes_sync/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install arch-boxes-sync.sh script dependencies
   pacman: name=curl,jq,unzip state=present
 
diff --git a/roles/archbuild/defaults/main.yml b/roles/archbuild/defaults/main.yml
index 5f6f830c51443dd7e6bd9f53794adb1a15eac550..93ded81088679b9d6df2af4eaacab8c53fd4c6bf 100644
--- a/roles/archbuild/defaults/main.yml
+++ b/roles/archbuild/defaults/main.yml
@@ -1,2 +1 @@
----
 archbuild_fs: tmpfs
diff --git a/roles/archbuild/handlers/main.yml b/roles/archbuild/handlers/main.yml
index 039b2657143ca4384474de52d23dd8fc750d142a..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/archbuild/handlers/main.yml
+++ b/roles/archbuild/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/archbuild/tasks/main.yml b/roles/archbuild/tasks/main.yml
index ff040323f940d33fcd9a65f91d67e373ec34cd20..7ed1734635693922ebc1fd9cec918efca6d4916c 100644
--- a/roles/archbuild/tasks/main.yml
+++ b/roles/archbuild/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install archbuild
   pacman:
     name:
diff --git a/roles/archive/defaults/main.yml b/roles/archive/defaults/main.yml
index 57950a1a21ad16b826e480f9cc3a825f7790f672..02d8acdb552ef12b757ed15415fe374f8ef7dc6e 100644
--- a/roles/archive/defaults/main.yml
+++ b/roles/archive/defaults/main.yml
@@ -1,5 +1,3 @@
----
-
 archive_user_name: 'archive'
 archive_user_home: '/home/archive'
 archive_repo: '{{ archive_user_home }}/archive-uploader'
diff --git a/roles/archive/tasks/main.yml b/roles/archive/tasks/main.yml
index d7bf621d5e6a885eb4f4305a3ee953754850bad5..4eb0e5ed8377ced24eb1754aabb9a666e1191307 100644
--- a/roles/archive/tasks/main.yml
+++ b/roles/archive/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install archivetools package
   pacman: name=archivetools state=present
 
diff --git a/roles/archive_web/defaults/main.yml b/roles/archive_web/defaults/main.yml
index 47e3fadb0b1d878f28d9c271ce18bfb8c6ff7d73..9153cf49ab130a5a157b5050bdad75b2892e7422 100644
--- a/roles/archive_web/defaults/main.yml
+++ b/roles/archive_web/defaults/main.yml
@@ -1,3 +1 @@
----
-
 archive_dir: '/srv/archive'
diff --git a/roles/archive_web/tasks/main.yml b/roles/archive_web/tasks/main.yml
index 256e142df60ce60ee4873210088396a9cd786b1d..18287e45daa7dab4458b539245069e791b93657d 100644
--- a/roles/archive_web/tasks/main.yml
+++ b/roles/archive_web/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/archmanweb/defaults/main.yml b/roles/archmanweb/defaults/main.yml
index 0bcfdacd166f6c32093ac6e6016f3c9d47b3f8c9..20590dda55d5e08cdf9df1c6deeaf8920d97c873 100644
--- a/roles/archmanweb/defaults/main.yml
+++ b/roles/archmanweb/defaults/main.yml
@@ -1,4 +1,3 @@
----
 archmanweb_dir: '/srv/http/archmanweb'
 archmanweb_cache_dir: '{{ archmanweb_dir }}/cache'
 archmanweb_domain: 'man.archlinux.org'
diff --git a/roles/archmanweb/tasks/main.yml b/roles/archmanweb/tasks/main.yml
index ed839eede21f529d82711c1702c75e28bd2a6541..26cb1c5e34f3c2e65772266b7bcfa862d0d9b6a8 100644
--- a/roles/archmanweb/tasks/main.yml
+++ b/roles/archmanweb/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/archusers/tasks/main.yml b/roles/archusers/tasks/main.yml
index 1a37793306dd7965252dfedaec0a99b4053ec0a0..329d2a1925cbe7a578d1594edad12c160cc4344a 100644
--- a/roles/archusers/tasks/main.yml
+++ b/roles/archusers/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create Arch Linux-specific groups
   group: name="{{ item }}" state=present system=no
   with_items: "{{ arch_groups }}"
diff --git a/roles/archweb/defaults/main.yml b/roles/archweb/defaults/main.yml
index 740c96686bcd38d65b9d83d7c8715bb486d2b064..2279380c70a0bc03d38ec4184dd4e299cb920d11 100644
--- a/roles/archweb/defaults/main.yml
+++ b/roles/archweb/defaults/main.yml
@@ -1,4 +1,3 @@
----
 archweb_dir: '/srv/http/archweb'
 archweb_domain: 'archlinux.org'
 archweb_alternate_domains: ['www.archlinux.org', 'master-key.archlinux.org', 'dev.archlinux.org', 'packages.archlinux.org', 'ipxe.archlinux.org', 'planet.archlinux.org']
diff --git a/roles/archweb/handlers/main.yml b/roles/archweb/handlers/main.yml
index a45815e99a5f48542f75200d36bb0af97b3cac80..4c8932c7474905ef926e2450dd478f3128766659 100644
--- a/roles/archweb/handlers/main.yml
+++ b/roles/archweb/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/archweb/tasks/main.yml b/roles/archweb/tasks/main.yml
index 51e9c244b92ed5aedacce9198c373b42aa1668c4..8ff3b43f6888bcef4de21cb6495fa95189c3798b 100644
--- a/roles/archweb/tasks/main.yml
+++ b/roles/archweb/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: run maintenance mode
   include_role:
     name: maintenance
diff --git a/roles/archwiki/defaults/main.yml b/roles/archwiki/defaults/main.yml
index fb14536307b3bab6ae15875412b5c3a240bfbffe..eb2d5dc7b22b4ef261f19a3c29a05ff605f9e335 100644
--- a/roles/archwiki/defaults/main.yml
+++ b/roles/archwiki/defaults/main.yml
@@ -1,4 +1,3 @@
----
 archwiki_dir: '/srv/http/archwiki'
 archwiki_domain: 'wiki.archlinux.org'
 archwiki_nginx_conf: '/etc/nginx/nginx.d/archwiki.conf'
diff --git a/roles/archwiki/handlers/main.yml b/roles/archwiki/handlers/main.yml
index 2b0df6797b61d04979ed31e45335dc438611fff8..0b96b9130510007b87dccb4b70e8b694df2aef40 100644
--- a/roles/archwiki/handlers/main.yml
+++ b/roles/archwiki/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart php-fpm@archwiki
   service: name=php-fpm@{{ archwiki_user }} state=restarted
 
diff --git a/roles/archwiki/meta/main.yml b/roles/archwiki/meta/main.yml
index 8b662c93af986b4bf2aa82b93fa4cfc976b8374a..69891c7b40a88e7b501bc67d45bf7f503e989234 100644
--- a/roles/archwiki/meta/main.yml
+++ b/roles/archwiki/meta/main.yml
@@ -1,3 +1,2 @@
----
 dependencies:
   - role: nginx
diff --git a/roles/archwiki/tasks/main.yml b/roles/archwiki/tasks/main.yml
index bac88b38cebfee166ad6514c58cd2012b9007525..6a8a80b02d88f55faf74611e680e014693a24d8b 100644
--- a/roles/archwiki/tasks/main.yml
+++ b/roles/archwiki/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: run maintenance mode
   include_role:
     name: maintenance
diff --git a/roles/aurweb/defaults/main.yml b/roles/aurweb/defaults/main.yml
index 7db3325f719dd41b611cbf83435ed01a2b7b889a..28a0494b4868589c88b7d107fb9a6b21e6135183 100644
--- a/roles/aurweb/defaults/main.yml
+++ b/roles/aurweb/defaults/main.yml
@@ -1,4 +1,3 @@
----
 aurweb_asgi_bind: '127.0.0.1:8000'
 
 aurweb_domain: 'aur.archlinux.org'
diff --git a/roles/aurweb/handlers/main.yml b/roles/aurweb/handlers/main.yml
index ae602c791ed50937bc0cb81633c370ea10cc42f1..bc9206e422115bc7d8019582b1198ffb41cad790 100644
--- a/roles/aurweb/handlers/main.yml
+++ b/roles/aurweb/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/aurweb/tasks/main.yml b/roles/aurweb/tasks/main.yml
index 8e8447f818be398bc8b414352b84d9de7644eb8f..f4bbc32a6a56ce405318d3d50b0c87175c850224 100644
--- a/roles/aurweb/tasks/main.yml
+++ b/roles/aurweb/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install required packages
   pacman:
     state: present
diff --git a/roles/borg_client/defaults/main.yml b/roles/borg_client/defaults/main.yml
index f883497fb0e9656482b49bddffdad1e0e854386c..117385d2a29ba5605234de527af6f1757d6ac7b0 100644
--- a/roles/borg_client/defaults/main.yml
+++ b/roles/borg_client/defaults/main.yml
@@ -1,4 +1,3 @@
----
 backup_hosts:
   - host: "ssh://u236610.your-storagebox.de:23"
     dir: "~/repo"
diff --git a/roles/borg_client/tasks/main.yml b/roles/borg_client/tasks/main.yml
index eea7fd0bcb3e0c2ca86e86fac2bf1496ac7a90d8..f4f3dc45b53e55c7002c58915102da148afe793e 100644
--- a/roles/borg_client/tasks/main.yml
+++ b/roles/borg_client/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install borg and tools
   pacman: name=borg state=present
 
diff --git a/roles/borg_server/tasks/main.yml b/roles/borg_server/tasks/main.yml
index 40d6bc71c7a896eb4787650ee2af371f688e2d8d..aadea58c81e63308083504fbc085a2e459adfa85 100644
--- a/roles/borg_server/tasks/main.yml
+++ b/roles/borg_server/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install borg
   pacman: name=borg state=present
 
diff --git a/roles/bugbot/defaults/main.yml b/roles/bugbot/defaults/main.yml
index afd72d728e5b0b0b5b43023b1aec9e3998f771bb..b3e80b0baf0ff815ec66e3ea26fc9ee4f5291608 100644
--- a/roles/bugbot/defaults/main.yml
+++ b/roles/bugbot/defaults/main.yml
@@ -1,4 +1,3 @@
----
 irc_host: 'irc.libera.chat'
 irc_port: '6697'
 irc_channel: '#archlinux-bugs'
diff --git a/roles/bugbot/tasks/main.yml b/roles/bugbot/tasks/main.yml
index 6f313928a95ec4e05bb626f8b9bbe17c796c9e84..e6917755a5e499161ed2ac8e68b86eb72235cce0 100644
--- a/roles/bugbot/tasks/main.yml
+++ b/roles/bugbot/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install bugbot utilities
   pacman: name=python-irc,python-beautifulsoup4,python-lxml state=present
 
diff --git a/roles/certbot/defaults/main.yml b/roles/certbot/defaults/main.yml
index bbe5c978f8afbe7c37090f22c078316190d43a7a..8bd07167036a1afad7795601d9c9dc2918b0b3b6 100644
--- a/roles/certbot/defaults/main.yml
+++ b/roles/certbot/defaults/main.yml
@@ -1,2 +1 @@
----
 certbot_dns_support: false
diff --git a/roles/certbot/tasks/main.yml b/roles/certbot/tasks/main.yml
index 953975079cf710186e952517428fc4defdec1251..66c8dc73ec8b6c325e53eb867cb85142685942af 100644
--- a/roles/certbot/tasks/main.yml
+++ b/roles/certbot/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install certbot
   pacman: name=certbot{{ ",certbot-dns-rfc2136" if certbot_dns_support }} state=present
 
diff --git a/roles/common/defaults/main.yml b/roles/common/defaults/main.yml
index ee917a2f5e956259d7cf4c8318f0138ef0426c33..a4eaf49e9acde6ab84911d0654525be5e9793c06 100644
--- a/roles/common/defaults/main.yml
+++ b/roles/common/defaults/main.yml
@@ -1,3 +1,2 @@
----
 configure_network: false
 enable_zram_swap: false
diff --git a/roles/common/handlers/main.yml b/roles/common/handlers/main.yml
index 27008abdcaed38ae448e10d295f8c18c25709257..3e913cce7eb609c4253dbf64fb4c95747fe4f9f9 100644
--- a/roles/common/handlers/main.yml
+++ b/roles/common/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart journald
   systemd:
     name: systemd-journald
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 4d7850b85127121a4c09a1c7a38bc4b2e7d1a07e..d836d0d3f77cb5176e4f23307d399c5601fe3317 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install essential tools
   pacman: name=vim,nano,tmux,htop,ncdu,bash-completion,rsync,vnstat state=present
 
diff --git a/roles/dbscripts/defaults/main.yml b/roles/dbscripts/defaults/main.yml
index 36be6568ac576daf0baf0c5e310ffde4871c7b90..24ec687305e4a61a96261708fd30e84a669a68f3 100644
--- a/roles/dbscripts/defaults/main.yml
+++ b/roles/dbscripts/defaults/main.yml
@@ -1,4 +1,3 @@
----
 dbscripts_commit: 20220131
 dbscripts_update: true
 dbscripts_pgp_emails: ['jelle@archlinux.org']
diff --git a/roles/dbscripts/tasks/main.yml b/roles/dbscripts/tasks/main.yml
index 7223eab998ec6c29fe84b12e0809204bb1a488f2..d050885d3b043e82a15ce15e177e97bc27d8895b 100644
--- a/roles/dbscripts/tasks/main.yml
+++ b/roles/dbscripts/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install svn, git, rsync and some perl stuff
   pacman: name=git,subversion,rsync,perl-dbd-pg,perl-timedate,diffstat state=present
 
diff --git a/roles/debuginfod/defaults/main.yml b/roles/debuginfod/defaults/main.yml
index b2e466fc51ba0137aa197f9f3611d13e7da2d8ef..0d17ccbea04322e247633b3ad2e22a507c5687c2 100644
--- a/roles/debuginfod/defaults/main.yml
+++ b/roles/debuginfod/defaults/main.yml
@@ -1,4 +1,3 @@
----
 debuginfod_httpd: false
 debuginfod_domain: debuginfod.archlinux.org
 debuginfod_port: 8002
diff --git a/roles/debuginfod/handlers/main.yml b/roles/debuginfod/handlers/main.yml
index 32806e290be74b5949cd06060a0552efc74ba5b5..3e008c97b7b0a31244d5ec076a30a377ec3ace34 100644
--- a/roles/debuginfod/handlers/main.yml
+++ b/roles/debuginfod/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload debuginfod
   service: name=debuginfod state=reloaded
diff --git a/roles/debuginfod/tasks/main.yml b/roles/debuginfod/tasks/main.yml
index 84695eee2f7831d675e14f2a3237e15b43aa6fc5..54a0b777807796bd42135ad7e6288952f3de9725 100644
--- a/roles/debuginfod/tasks/main.yml
+++ b/roles/debuginfod/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install debuginfod
   pacman: name=debuginfod state=present
 
diff --git a/roles/dovecot/handlers/main.yml b/roles/dovecot/handlers/main.yml
index 32c99b581dcba6c1b674d9f5160ff46fb3987695..3b278cb8473944a7c388618b92684e49a7f6f43c 100644
--- a/roles/dovecot/handlers/main.yml
+++ b/roles/dovecot/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: reload dovecot
   service: name=dovecot state=restarted
 
diff --git a/roles/dovecot/tasks/main.yml b/roles/dovecot/tasks/main.yml
index 652ddfdbdafc94db452f3cad541cae8d38e8e456..a6ecefc70733d25e120332bfd5f50cab3f59c55c 100644
--- a/roles/dovecot/tasks/main.yml
+++ b/roles/dovecot/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install dovecot
   pacman: name=dovecot,pigeonhole state=present
 
diff --git a/roles/fetchmail/handlers/main.yml b/roles/fetchmail/handlers/main.yml
index e078510cc5076210a6e8208b938b70e1769b1b5b..7a8dce8e4ea98b42d6db68725b84c604463dc4a9 100644
--- a/roles/fetchmail/handlers/main.yml
+++ b/roles/fetchmail/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart fetchmail
   service: name=fetchmail state=restarted
diff --git a/roles/fetchmail/tasks/main.yml b/roles/fetchmail/tasks/main.yml
index f0422efc3d9c201839d2fa2618b8ec08ba93b4a1..d17ee5a88dcd8c4d49a8213fa14e0b2ffb26d47d 100644
--- a/roles/fetchmail/tasks/main.yml
+++ b/roles/fetchmail/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install fetchmail
   pacman: name=fetchmail state=present
 
diff --git a/roles/firewalld/handlers/main.yml b/roles/firewalld/handlers/main.yml
index b720c7e902d48a40e4b91ff118543f3e2a5572a8..942cb99cc1362dd7b82b5ba84ee1a5cfbd135027 100644
--- a/roles/firewalld/handlers/main.yml
+++ b/roles/firewalld/handlers/main.yml
@@ -1,4 +1,3 @@
----
 # NOTE: hack for a systemd bug (restarting firewalld.service fails due to fail2ban.service)
 # https://github.com/systemd/systemd/issues/2830
 # https://bugzilla.opensuse.org/show_bug.cgi?id=1146856
diff --git a/roles/firewalld/tasks/main.yml b/roles/firewalld/tasks/main.yml
index 9143abcb46880bafb2a4786012f9a6fecaf2274c..13ed8f32fe74687610843bb1892e06ca6dce187a 100644
--- a/roles/firewalld/tasks/main.yml
+++ b/roles/firewalld/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install firewalld
   pacman:
     name: firewalld
diff --git a/roles/fluxbb/defaults/main.yml b/roles/fluxbb/defaults/main.yml
index b603e5f781b3d58ba0b0589e48335a5c1805f6f4..5da4a6692a0fc23528e820f8e89b73c403dd1e5e 100644
--- a/roles/fluxbb/defaults/main.yml
+++ b/roles/fluxbb/defaults/main.yml
@@ -1,4 +1,3 @@
----
 fluxbb_domain: bbs.archlinux.org
 fluxbb_dir: /srv/http/fluxbb
 
diff --git a/roles/fluxbb/handlers/main.yml b/roles/fluxbb/handlers/main.yml
index e39f788ef8150d4c0652c99407b1e22a5d9f5c18..5b6b366b4283bae7ffe3e2e72ea6af9f06e035ec 100644
--- a/roles/fluxbb/handlers/main.yml
+++ b/roles/fluxbb/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart php-fpm@fluxbb
   systemd: name=php-fpm@fluxbb.service state=restarted
diff --git a/roles/fluxbb/tasks/main.yml b/roles/fluxbb/tasks/main.yml
index aa0538d525e2aeb23cb509eafca37575f982527f..443e0b67e77ff02b35ad6aa00ca7077088db52da 100644
--- a/roles/fluxbb/tasks/main.yml
+++ b/roles/fluxbb/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create user
   user: >
     name=fluxbb home="{{ fluxbb_dir }}"
diff --git a/roles/flyspray/defaults/main.yml b/roles/flyspray/defaults/main.yml
index 6e211fddb15b72a7589742377c08b43a26480fac..19a66b52d259d94329a5577f76e27e5da4b7cb8e 100644
--- a/roles/flyspray/defaults/main.yml
+++ b/roles/flyspray/defaults/main.yml
@@ -1,4 +1,3 @@
----
 flyspray_dir: '/srv/http/flyspray'
 flyspray_commit: 'ce4a09c8cb5de0483bb9875135bd5645039765f9'
 flyspray_domain: 'bugs.archlinux.org'
diff --git a/roles/flyspray/handlers/main.yml b/roles/flyspray/handlers/main.yml
index 57f5fcb1d4d4b42054efd185fc2cb1ed5ca83699..f9b2114d08ea8858b1824c96c10260e4dc5f0ba9 100644
--- a/roles/flyspray/handlers/main.yml
+++ b/roles/flyspray/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart php-fpm7@flyspray
   service: name=php-fpm7@flyspray state=restarted
diff --git a/roles/flyspray/tasks/main.yml b/roles/flyspray/tasks/main.yml
index de42365f7666b241705211c460e367980245abe2..c61c81c3280c590663b3bfd9779ad43dfe77ba99 100644
--- a/roles/flyspray/tasks/main.yml
+++ b/roles/flyspray/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: run maintenance mode
   include_role:
     name: maintenance
diff --git a/roles/geo_dns/handlers/main.yml b/roles/geo_dns/handlers/main.yml
index ee953235084233b13220d92752900f740d077485..d889effb95e68108d57d1f18a299e9448fb178b4 100644
--- a/roles/geo_dns/handlers/main.yml
+++ b/roles/geo_dns/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart powerdns
   service: name=pdns state=restarted
diff --git a/roles/geo_dns/meta/main.yml b/roles/geo_dns/meta/main.yml
index d21409a9b8e36a18660cb2b1a6cef8a481721adc..7ec93ff3130f26c300c32ce81d8f68ff5aae5e75 100644
--- a/roles/geo_dns/meta/main.yml
+++ b/roles/geo_dns/meta/main.yml
@@ -1,4 +1,3 @@
----
 dependencies:
   - role: geoipupdate
     vars:
diff --git a/roles/geo_dns/tasks/main.yml b/roles/geo_dns/tasks/main.yml
index c7a251f13e6803efb8130c02bc4fe9a832074656..c98b116c53d6bbe76196125f11d010fffd93d989 100644
--- a/roles/geo_dns/tasks/main.yml
+++ b/roles/geo_dns/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install powerdns and geoip
   pacman: name=powerdns,libmaxminddb,geoip,yaml-cpp state=present
 
diff --git a/roles/geo_dns/templates/geo.yml.j2 b/roles/geo_dns/templates/geo.yml.j2
index 0b7049cd7a48d0725b73bca496026931ecd08b14..a1239285185cb6d3c3fee8c9500879ee788cf6f6 100644
--- a/roles/geo_dns/templates/geo.yml.j2
+++ b/roles/geo_dns/templates/geo.yml.j2
@@ -1,5 +1,4 @@
 #jinja2:lstrip_blocks: True
----
 domains:
   {% for domain in geo_domains %}
   - domain: {{ domain }}
diff --git a/roles/geoipupdate/defaults/main.yml b/roles/geoipupdate/defaults/main.yml
index f8607f3f888a00b22227b0c8d734b109c18b3474..815680b1bd1ad60f986b54af6a91089afa0eed7f 100644
--- a/roles/geoipupdate/defaults/main.yml
+++ b/roles/geoipupdate/defaults/main.yml
@@ -1,3 +1 @@
----
-
 geoipupdate_edition_ids: GeoLite2-Country # GeoLite2-City GeoLite2-ASN
diff --git a/roles/geoipupdate/handlers/main.yml b/roles/geoipupdate/handlers/main.yml
index 039b2657143ca4384474de52d23dd8fc750d142a..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/geoipupdate/handlers/main.yml
+++ b/roles/geoipupdate/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/geoipupdate/tasks/main.yml b/roles/geoipupdate/tasks/main.yml
index 2423d54c7fd437d6c2c678e28acb778b1c90220f..dced74cc1abbd4eaa52d04627face51181e563c5 100644
--- a/roles/geoipupdate/tasks/main.yml
+++ b/roles/geoipupdate/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install geoipupdate
   pacman: name=geoipupdate state=present
   register: installation
diff --git a/roles/gitlab/tasks/main.yml b/roles/gitlab/tasks/main.yml
index c9a233c75280f1ef06df8d2ed54111d9dec28745..e2de614abf9a0cf153da6cb3348b5a1101dc16c4 100644
--- a/roles/gitlab/tasks/main.yml
+++ b/roles/gitlab/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install docker dependencies
   pacman: name=docker,python-docker state=present
 
diff --git a/roles/gitlab_runner/tasks/main.yml b/roles/gitlab_runner/tasks/main.yml
index 8bb1d517148d26937f52863610e987b81f91e44d..dbd871061f130f3626838f57a8957de2bd897db9 100644
--- a/roles/gitlab_runner/tasks/main.yml
+++ b/roles/gitlab_runner/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install dependencies
   pacman: name=docker,python-docker,python-gitlab,gitlab-runner state=latest update_cache=yes
   notify: restart gitlab-runner
diff --git a/roles/gluebuddy/handlers/main.yml b/roles/gluebuddy/handlers/main.yml
index 039b2657143ca4384474de52d23dd8fc750d142a..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/gluebuddy/handlers/main.yml
+++ b/roles/gluebuddy/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/gluebuddy/tasks/main.yml b/roles/gluebuddy/tasks/main.yml
index 6aeff3488603d2ec3e7aae81416427de78ca7e05..8b7bcd0d8a546e41ad599094c0a01093a04f8117 100644
--- a/roles/gluebuddy/tasks/main.yml
+++ b/roles/gluebuddy/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install sequoia
   pacman: name=sequoia-sq state=present
 
diff --git a/roles/grafana/defaults/main.yml b/roles/grafana/defaults/main.yml
index 5f87fce86afa41db29bb342c3bbd50612a95b9a7..5a8e5c5490a5151627a634146636870190deb309 100644
--- a/roles/grafana/defaults/main.yml
+++ b/roles/grafana/defaults/main.yml
@@ -1,3 +1,2 @@
----
 grafana_domain: "grafana.archlinux.org"
 grafana_anonymous_access: false
diff --git a/roles/grafana/handlers/main.yml b/roles/grafana/handlers/main.yml
index 91247b4a43605cad631ef5ea5ead0d79bf5cd297..a0184c559b20710490d415b18c90eb377c29ebba 100644
--- a/roles/grafana/handlers/main.yml
+++ b/roles/grafana/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart grafana
   service: name=grafana state=restarted
diff --git a/roles/grafana/tasks/main.yml b/roles/grafana/tasks/main.yml
index c7058e12fc88b4fc7a1e24775e5dc75c4a46fc56..e71a914f9a14549c3877c5ce221ea10e7d238dca 100644
--- a/roles/grafana/tasks/main.yml
+++ b/roles/grafana/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install grafana
   pacman: name=grafana state=present
 
diff --git a/roles/hardening/handlers/main.yml b/roles/hardening/handlers/main.yml
index 16f770ce327e8522443e3fb4520ad6508591056b..4649ada5b55614dd731a2c6681cb84cd66685312 100644
--- a/roles/hardening/handlers/main.yml
+++ b/roles/hardening/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: apply sysctl settings
   command: sysctl --system
diff --git a/roles/hardening/tasks/main.yml b/roles/hardening/tasks/main.yml
index 623e98e97c40a46f7b6a44ae8eea2aebc0d34cc4..cee35d766e368dfc16a674928cd5d527ba0e34d1 100644
--- a/roles/hardening/tasks/main.yml
+++ b/roles/hardening/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: set restricted access to kernel logs
   copy: src=50-dmesg-restrict.conf dest=/etc/sysctl.d/50-dmesg-restrict.conf owner=root group=root mode=0644
   notify:
diff --git a/roles/hedgedoc/tasks/main.yml b/roles/hedgedoc/tasks/main.yml
index 8f681957015261c4c82b8592f24bb970228d2c74..8d259ff697654c6a50a538366aefd72f78a9ca3a 100644
--- a/roles/hedgedoc/tasks/main.yml
+++ b/roles/hedgedoc/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/hetzner_storagebox/tasks/main.yml b/roles/hetzner_storagebox/tasks/main.yml
index 66649bfff877b7e31c42de95cb0cd86d6a2a1acb..5c963e8390ac5286d0de5ec5a3858b05b0781829 100644
--- a/roles/hetzner_storagebox/tasks/main.yml
+++ b/roles/hetzner_storagebox/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 # This role runs on localhost; use commands like sftp to upload configuration
 
 - name: create the root backup directory at {{ backup_dir }}
diff --git a/roles/hetzner_storagebox/tasks/upload_client_authorized_keys.yml b/roles/hetzner_storagebox/tasks/upload_client_authorized_keys.yml
index d5b7d2c3d428c4deb0801e60077fdbf0882cd4b2..6f513c4c71add88caa326774bb5ac972ba20ff6b 100644
--- a/roles/hetzner_storagebox/tasks/upload_client_authorized_keys.yml
+++ b/roles/hetzner_storagebox/tasks/upload_client_authorized_keys.yml
@@ -1,5 +1,3 @@
----
-
 - name: fill tempfile
   copy: content="{{ lookup('template', 'authorized_keys_client.j2') }}" dest="{{ tempfile.path }}" mode=preserve
   no_log: true
diff --git a/roles/install_arch/tasks/main.yml b/roles/install_arch/tasks/main.yml
index 1cf88b0876efd1100d46f3aa0d15b51db1c7a503..faeb3b61776568043de6851dccaa46fecabcaf2b 100644
--- a/roles/install_arch/tasks/main.yml
+++ b/roles/install_arch/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: read /etc/motd
   command: cat /etc/motd
   register: motd_contents
diff --git a/roles/keycloak/handlers/main.yml b/roles/keycloak/handlers/main.yml
index c0b71fdbc856c404b6cdc36e8f447c52501253c6..bdfa2b24e21fe40827039bdfa3ab20e75b9eaa20 100644
--- a/roles/keycloak/handlers/main.yml
+++ b/roles/keycloak/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart keycloak
   service: name=keycloak state=restarted
 
diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml
index dddf804b3535dbdb995df98152344bef12ef941b..f6dd059c2774da32d615ab12b95abeb38ec82562 100644
--- a/roles/keycloak/tasks/main.yml
+++ b/roles/keycloak/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install keycloak
   pacman: name=jre11-openjdk,keycloak,keycloak-archlinux-theme,keycloak-metrics-spi,python-passlib state=present
 
diff --git a/roles/loki/handlers/main.yml b/roles/loki/handlers/main.yml
index d87b9ce6560885786ee94ab67c3020c7864efa10..2fb42b60cc438cce1651222fc921ababd03a1034 100644
--- a/roles/loki/handlers/main.yml
+++ b/roles/loki/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart loki
   service: name=loki state=restarted
diff --git a/roles/loki/tasks/main.yml b/roles/loki/tasks/main.yml
index 73401462c4a35989102b263d0a82aa8f27052639..ed384563b0ac763fa976ef34647c1dca80ffc67a 100644
--- a/roles/loki/tasks/main.yml
+++ b/roles/loki/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install loki and logcli
   pacman: name=loki,logcli state=present
 
diff --git a/roles/mailman/handlers/main.yml b/roles/mailman/handlers/main.yml
index bf89770a798c7f06650b62e516aeef98b49eb509..833f0b2864f46058da01dd85c68863bb4a3b3cff 100644
--- a/roles/mailman/handlers/main.yml
+++ b/roles/mailman/handlers/main.yml
@@ -1,4 +1,3 @@
----
 - name: restart mailman
   service: name=mailman daemon_reload=yes state=restarted
 
diff --git a/roles/mailman/tasks/main.yml b/roles/mailman/tasks/main.yml
index 0b6497435bcda41c4ae18099471c587144bd736d..e9818381b8d12cf04010645564448f4164189fa6 100644
--- a/roles/mailman/tasks/main.yml
+++ b/roles/mailman/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/mailman3/handlers/main.yml b/roles/mailman3/handlers/main.yml
index 2e70e721a21a342ba9e37f1e1bd408f211b367df..3f47d424f8cdae4a781123bee768f963c4484902 100644
--- a/roles/mailman3/handlers/main.yml
+++ b/roles/mailman3/handlers/main.yml
@@ -1,4 +1,3 @@
----
 - name: reload mailman
   service: name=mailman3 state=reloaded
 
diff --git a/roles/mailman3/tasks/main.yml b/roles/mailman3/tasks/main.yml
index 77bc10e9211efbb041fbd570ac12f9f0f065577b..35986e225085019f4ee024ff7f9b08f9a124c3b8 100644
--- a/roles/mailman3/tasks/main.yml
+++ b/roles/mailman3/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install mailman3 and related packages
   pacman: name=mailman3,mailman3-hyperkitty,python-psycopg2,mailman-web,uwsgi-plugin-python state=present
   register: install
diff --git a/roles/maintenance/defaults/main.yml b/roles/maintenance/defaults/main.yml
index 72bddf13097316fd369cda7fa2bf761091cb89ed..ff75a33163f767f1d8b671013b128729f8c99b28 100644
--- a/roles/maintenance/defaults/main.yml
+++ b/roles/maintenance/defaults/main.yml
@@ -1,3 +1,2 @@
----
 maintenance_logs_dir: '/var/log/nginx/maintenance'
 maintenance_http_dir: '/srv/http/maintenance'
diff --git a/roles/maintenance/tasks/main.yml b/roles/maintenance/tasks/main.yml
index 31e9a77afdbff3a5aceac080bea9415d39e90427..6122d1c88ef20c2c6e1d573e6e56b3798e0dbba2 100644
--- a/roles/maintenance/tasks/main.yml
+++ b/roles/maintenance/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create the maintenance logs dir
   file: path={{ maintenance_logs_dir }} state=directory owner=root group=root mode=0755
 
diff --git a/roles/mariadb/handlers/main.yml b/roles/mariadb/handlers/main.yml
index 6f737d9130d2de8b1d277cf2f284a0777a333d2a..94432d1a581c2a10d806b1f0dcbbb123e9be89f7 100644
--- a/roles/mariadb/handlers/main.yml
+++ b/roles/mariadb/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart mariadb
   service: name=mariadb state=restarted
diff --git a/roles/mariadb/tasks/main.yml b/roles/mariadb/tasks/main.yml
index a8e6750e2619f5dd2aface67c848f8a1aec508d5..afed3dbc0e93b978b99da8277e62e38b5eeed477 100644
--- a/roles/mariadb/tasks/main.yml
+++ b/roles/mariadb/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install mariadb
   pacman: name=mariadb,python-mysqlclient state=present
 
diff --git a/roles/matrix/defaults/main.yml b/roles/matrix/defaults/main.yml
index cedb5d137563ee24dae0c83ea7d97e66ff8d3e49..ab6f34f56e4fa30aec31a30d4965b3b5439ca816 100644
--- a/roles/matrix/defaults/main.yml
+++ b/roles/matrix/defaults/main.yml
@@ -1,5 +1,3 @@
----
-
 matrix_max_upload_size: 50M
 matrix_nginx_config:
   - name: mjolnir
diff --git a/roles/matrix/handlers/main.yml b/roles/matrix/handlers/main.yml
index 08841a574ad5a06ec9dd7da87e4e323067fe074e..aac7600071fb62c7c2a30be1b649a469736952cf 100644
--- a/roles/matrix/handlers/main.yml
+++ b/roles/matrix/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart synapse
   systemd:
     name: synapse
diff --git a/roles/matrix/tasks/main.yml b/roles/matrix/tasks/main.yml
index 4272fb89a137f20c4682d3af24dd9f0ce7b81845..badfb861d828731b4fa40354a301b14a17359129 100644
--- a/roles/matrix/tasks/main.yml
+++ b/roles/matrix/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/memcached/tasks/main.yml b/roles/memcached/tasks/main.yml
index bb37ab7a843f27d7dbdafb71ae5e98c865ce743e..5665f60f3efa096479b7599f26995fb5a764a741 100644
--- a/roles/memcached/tasks/main.yml
+++ b/roles/memcached/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install memcached
   pacman: name=memcached state=present
 
diff --git a/roles/mta_sts/tasks/main.yml b/roles/mta_sts/tasks/main.yml
index c97a4c07cc6c6103ae9721e7ae96248c36c80ba3..6da983042adc5ab197c3ab80afbc2e05cf05a410 100644
--- a/roles/mta_sts/tasks/main.yml
+++ b/roles/mta_sts/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/networking/defaults/main.yml b/roles/networking/defaults/main.yml
index fbd1d6f54d359e89fe5b97ddf67e08f5033e66ef..8ba213dd4320d810a8e99109db979780a25a5a31 100644
--- a/roles/networking/defaults/main.yml
+++ b/roles/networking/defaults/main.yml
@@ -1,3 +1,2 @@
----
 chroot_path: ""
 network_interface: "en*"
diff --git a/roles/networking/handlers/main.yml b/roles/networking/handlers/main.yml
index ebbc6ef0ca904cf75932d1952d641b43a416532f..5a7efe1410103f2bb58b3ad341673b7623c0bca4 100644
--- a/roles/networking/handlers/main.yml
+++ b/roles/networking/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart networkd
   systemd:
     name: systemd-networkd
diff --git a/roles/networking/tasks/main.yml b/roles/networking/tasks/main.yml
index cccf386988b6a0f8d5627c1b025a02bc25409845..9426ef54564f95e24326250e9577e52ed55fdedc 100644
--- a/roles/networking/tasks/main.yml
+++ b/roles/networking/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: configure network (static)
   block:
     - name: install 10-static-ethernet.network
diff --git a/roles/nginx/defaults/main.yml b/roles/nginx/defaults/main.yml
index 2f0347b76967a8980dbb4b1f7ae31d30f515f068..b49e68ad6c54e0ad84a6eeb36e137b10eb517d10 100644
--- a/roles/nginx/defaults/main.yml
+++ b/roles/nginx/defaults/main.yml
@@ -1,3 +1,2 @@
----
 letsencrypt_validation_dir: "/var/lib/letsencrypt"
 nginx_firewall_zone:
diff --git a/roles/nginx/handlers/main.yml b/roles/nginx/handlers/main.yml
index bcf145db8b84220fb0fc9201eb41b4f0449180b1..816ad436e1aa052e1f8d162e16b0afe236d578ad 100644
--- a/roles/nginx/handlers/main.yml
+++ b/roles/nginx/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload nginx
   service: name=nginx state=reloaded
diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml
index b80b6aaf141460827be790d7336e50e256bbccfc..442a528f3f53a303da3c48f6570610cded6032b9 100644
--- a/roles/nginx/tasks/main.yml
+++ b/roles/nginx/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install nginx
   pacman: name=nginx,nginx-mod-brotli state=present
 
diff --git a/roles/patchwork/defaults/main.yml b/roles/patchwork/defaults/main.yml
index e4566c1bb12d1b310e1b2a55c9abf62fb4654726..16dc017c1f02afbfd00d5b35e019c90634626463 100644
--- a/roles/patchwork/defaults/main.yml
+++ b/roles/patchwork/defaults/main.yml
@@ -1,4 +1,3 @@
----
 patchwork_dir: '/srv/http/patchwork'
 patchwork_domain: 'patchwork.archlinux.org'
 patchwork_nginx_conf: '/etc/nginx/nginx.d/patchwork.conf'
diff --git a/roles/patchwork/handlers/main.yml b/roles/patchwork/handlers/main.yml
index 7b722826719db15d355ddd51915b6ba7aa5ecab7..5348bff90ab2f019552c2768a0d3537c808a597f 100644
--- a/roles/patchwork/handlers/main.yml
+++ b/roles/patchwork/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/patchwork/tasks/main.yml b/roles/patchwork/tasks/main.yml
index b1063c94c618d0b9417a5d3d390c109e1f03b68f..6ff0f141402dbfb7a59c9d37dc7ba4c79608191e 100644
--- a/roles/patchwork/tasks/main.yml
+++ b/roles/patchwork/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: run maintenance mode
   include_role:
     name: maintenance
diff --git a/roles/php7_fpm/defaults/main.yml b/roles/php7_fpm/defaults/main.yml
index ca6a611119b072fcc591a842ac8a1a8a2a1b81c4..30c66ddcee9d226169882b9585e1200248a89d83 100644
--- a/roles/php7_fpm/defaults/main.yml
+++ b/roles/php7_fpm/defaults/main.yml
@@ -1,4 +1,3 @@
----
 php_extensions:
   - curl
   - zip
diff --git a/roles/php7_fpm/handlers/main.yaml b/roles/php7_fpm/handlers/main.yaml
index 02c5f7bfa04a433c89b9dcf909725c4be53c9309..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/php7_fpm/handlers/main.yaml
+++ b/roles/php7_fpm/handlers/main.yaml
@@ -1,4 +1,3 @@
----
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/php7_fpm/tasks/main.yaml b/roles/php7_fpm/tasks/main.yaml
index 7c4809e20f6e54657724049cc72267bb2e757545..5428735333ca2918f232883b8326c48245003a80 100644
--- a/roles/php7_fpm/tasks/main.yaml
+++ b/roles/php7_fpm/tasks/main.yaml
@@ -1,4 +1,3 @@
----
 - name: install php7-fpm
   pacman: name=php7-fpm,php7-gd,php7-pgsql state=present
 
diff --git a/roles/php_fpm/defaults/main.yml b/roles/php_fpm/defaults/main.yml
index ca6a611119b072fcc591a842ac8a1a8a2a1b81c4..30c66ddcee9d226169882b9585e1200248a89d83 100644
--- a/roles/php_fpm/defaults/main.yml
+++ b/roles/php_fpm/defaults/main.yml
@@ -1,4 +1,3 @@
----
 php_extensions:
   - curl
   - zip
diff --git a/roles/php_fpm/handlers/main.yaml b/roles/php_fpm/handlers/main.yaml
index 02c5f7bfa04a433c89b9dcf909725c4be53c9309..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/php_fpm/handlers/main.yaml
+++ b/roles/php_fpm/handlers/main.yaml
@@ -1,4 +1,3 @@
----
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/php_fpm/tasks/main.yaml b/roles/php_fpm/tasks/main.yaml
index 57ac271f9a1fc1e2c6ddcbbc10f6de0d61d679a8..01c6d645302a556827a2427022ad28e55ca31878 100644
--- a/roles/php_fpm/tasks/main.yaml
+++ b/roles/php_fpm/tasks/main.yaml
@@ -1,4 +1,3 @@
----
 - name: install php-fpm
   pacman: name=php-fpm,php-gd,php-pgsql state=present
 
diff --git a/roles/phrik/tasks/main.yml b/roles/phrik/tasks/main.yml
index bf91edb4e6bb4d8e3cd9e61d49ad33005a94ac01..1718edb493364e941679de1a7fff9edfd6203230 100644
--- a/roles/phrik/tasks/main.yml
+++ b/roles/phrik/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install phrik utilities
   pacman: name=git,pkgfile,polkit state=present
 
diff --git a/roles/ping/tasks/main.yml b/roles/ping/tasks/main.yml
index fd53e1117abab29c78f66bf795b409981a7ad2c5..54ecfba85a4bc64a804aa9195b7bca0d4d0bae7f 100644
--- a/roles/ping/tasks/main.yml
+++ b/roles/ping/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/postfix/defaults/main.yml b/roles/postfix/defaults/main.yml
index 113f462403b9f097a436529c95f8288a112a5139..73e373014a7a89af767fd5ea440acf8521b981ef 100644
--- a/roles/postfix/defaults/main.yml
+++ b/roles/postfix/defaults/main.yml
@@ -1,5 +1,3 @@
----
-
 postfix_patchwork_enabled: false
 postfix_patchwork_user: "patchwork"
 postfix_patchwork_mail_handler: "/usr/local/bin/patchwork-parsemail-wrapper.sh"
diff --git a/roles/postfix/handlers/main.yml b/roles/postfix/handlers/main.yml
index 1a5c81e0749c084bbea36a69faabcb895cb68208..b40a9ab2c9ce4240ba3a49138e15c4138edcb96e 100644
--- a/roles/postfix/handlers/main.yml
+++ b/roles/postfix/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: restart postfix
   service:
     name: postfix
diff --git a/roles/postfix/tasks/main.yml b/roles/postfix/tasks/main.yml
index 19477610ce208c0a20c23ac0d4f3ffd338587f69..dcb35f4d2b472cb873d5da796baedc3e4b2f0b8b 100644
--- a/roles/postfix/tasks/main.yml
+++ b/roles/postfix/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install postfix
   pacman: name=postfix,postfix-pcre state=present
 
diff --git a/roles/postfix_null/defaults/main.yml b/roles/postfix_null/defaults/main.yml
index 936bcb7661097c1fea2b8086892e20720b0cc1da..45d9fb2a01036f90e5fef3b136f5c661346d194e 100644
--- a/roles/postfix_null/defaults/main.yml
+++ b/roles/postfix_null/defaults/main.yml
@@ -1,2 +1 @@
----
 postfix_relayhost: "mail.archlinux.org"
diff --git a/roles/postfix_null/handlers/main.yml b/roles/postfix_null/handlers/main.yml
index b247a9f8367dabbc4eadb4406af9035974acb95c..92e6bc6be6c06e7abfda7e8930ad5bee18927a35 100644
--- a/roles/postfix_null/handlers/main.yml
+++ b/roles/postfix_null/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: reload postfix
   service: name=postfix state=reloaded
diff --git a/roles/postfix_null/tasks/main.yml b/roles/postfix_null/tasks/main.yml
index 2cfd7f2c634a9e5c0449015a8985b289b07c0697..0fd69c97db8238d30260eaa55730225c451266e7 100644
--- a/roles/postfix_null/tasks/main.yml
+++ b/roles/postfix_null/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install postfix
   pacman: name=postfix state=present
 
diff --git a/roles/postfwd/handlers/main.yml b/roles/postfwd/handlers/main.yml
index 58a83659ebd59d3d8153512b67a108482c41bb92..d8da47c4b2452dbdbf01319774a2ec2d7cd49328 100644
--- a/roles/postfwd/handlers/main.yml
+++ b/roles/postfwd/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload postfwd
   service: name=postfwd state=reloaded
diff --git a/roles/postfwd/tasks/main.yml b/roles/postfwd/tasks/main.yml
index 5ed586fa9cce044d29b0b7ccf007c25aa59c56bb..9e5a5b74ece91b5b8aca680c2c827c0fbaaca788 100644
--- a/roles/postfwd/tasks/main.yml
+++ b/roles/postfwd/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install postfwd
   pacman: name=postfwd state=present
 
diff --git a/roles/postgres/defaults/main.yml b/roles/postgres/defaults/main.yml
index d9c96115140fe6e9b4151146c98ce133ee78ccfc..ed428268828f6548f523ce2959a51ec04f74a0a2 100644
--- a/roles/postgres/defaults/main.yml
+++ b/roles/postgres/defaults/main.yml
@@ -1,4 +1,3 @@
----
 postgres_listen_addresses: 'localhost'
 postgres_max_connections: '100'
 postgres_firewalld_zone:
diff --git a/roles/postgres/handlers/main.yml b/roles/postgres/handlers/main.yml
index f498f8280d9523af1ddd81aa3f873ef5c0b3d6ff..852591c094974f6cb66e3289e963a6def62632dd 100644
--- a/roles/postgres/handlers/main.yml
+++ b/roles/postgres/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart postgres
   service: name=postgresql state=restarted
diff --git a/roles/postgres/tasks/main.yml b/roles/postgres/tasks/main.yml
index 56111f69d8a45ce40618b4f0465ac480e98e84f9..9f916cb7695b959b4fc2493e18017a1e9d38be68 100644
--- a/roles/postgres/tasks/main.yml
+++ b/roles/postgres/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create postgres subvolume
   command: btrfs subvol create /var/lib/postgres
   args:
diff --git a/roles/prometheus/handlers/main.yml b/roles/prometheus/handlers/main.yml
index 7fa18fadb5b9d8971ec1c9fd45da026b7485e4bc..2c1e0aa9b6578ef1f57c96390bd9536c77b258e0 100644
--- a/roles/prometheus/handlers/main.yml
+++ b/roles/prometheus/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload prometheus
   service: name=prometheus state=reloaded
diff --git a/roles/prometheus/tasks/main.yml b/roles/prometheus/tasks/main.yml
index 3c1aa21f9f6a686562af716b61d59d61d31147c0..a153ca765fcb7a30ca97d0434c01c518eed0441f 100644
--- a/roles/prometheus/tasks/main.yml
+++ b/roles/prometheus/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install prometheus server
   pacman: name=prometheus,python-passlib,python-bcrypt state=present
 
diff --git a/roles/prometheus_exporters/defaults/main.yml b/roles/prometheus_exporters/defaults/main.yml
index 0fe0db5876cbd899da3dbc589af5628bf76f0f3e..7a2043c391f018af054dcd86068733e4522cdace 100644
--- a/roles/prometheus_exporters/defaults/main.yml
+++ b/roles/prometheus_exporters/defaults/main.yml
@@ -1,5 +1,3 @@
----
-
 prometheus_textfile_dir: /var/lib/node_exporter
 
 gitlab_runner_exporter_port: '9252'
diff --git a/roles/prometheus_exporters/handlers/main.yml b/roles/prometheus_exporters/handlers/main.yml
index e099b7807381a9a3ec0d908fc8d567a99fbc16a6..94ee1d8810cea2565c37ad9c7f0dc210e8ac82d1 100644
--- a/roles/prometheus_exporters/handlers/main.yml
+++ b/roles/prometheus_exporters/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: reload blackbox exporter
   service: name=prometheus-blackbox-exporter state=reloaded
diff --git a/roles/prometheus_exporters/tasks/main.yml b/roles/prometheus_exporters/tasks/main.yml
index 4a265a15fb866674f4094fda549a1da36883d8cc..dad9fcb0447746cb63e3ec0b588869fed042c1b1 100644
--- a/roles/prometheus_exporters/tasks/main.yml
+++ b/roles/prometheus_exporters/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install prometheus-node-exporter
   pacman: name=prometheus-node-exporter,arch-audit,pacman-contrib,jq,hq,sudo state=present
 
diff --git a/roles/promtail/handlers/main.yml b/roles/promtail/handlers/main.yml
index 2f6515c174972ad60915d95a258fe56b64572b89..1645fbe2d7c6a6e59fe00cb530b230526eafdf9c 100644
--- a/roles/promtail/handlers/main.yml
+++ b/roles/promtail/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: restart promtail
   service: name=promtail daemon_reload=yes state=restarted
diff --git a/roles/promtail/tasks/main.yml b/roles/promtail/tasks/main.yml
index 73409778529c9e03f46a19b7c686137096ccdcdb..640b3e6e992339e6022592fb74a4e4abee47bc53 100644
--- a/roles/promtail/tasks/main.yml
+++ b/roles/promtail/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install promtail
   pacman: name=promtail state=present
 
diff --git a/roles/public_html/tasks/main.yml b/roles/public_html/tasks/main.yml
index 7c559431a4cb544e0c4b24834facda62ff455888..01c8f61af7a0a7e4f0f2911147fb138b8fe75a02 100644
--- a/roles/public_html/tasks/main.yml
+++ b/roles/public_html/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/quassel/handlers/main.yml b/roles/quassel/handlers/main.yml
index 75036929d44c35b324fa5c5bb2103ca3af7fd7e2..4cdf85af110bf5549dd158dfad52dc85ded066e5 100644
--- a/roles/quassel/handlers/main.yml
+++ b/roles/quassel/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: daemon reload
   systemd: daemon_reload=yes
diff --git a/roles/quassel/tasks/main.yml b/roles/quassel/tasks/main.yml
index 807b85e7561b77a93d50410dc18cac13269059a8..d72c9912587ee1eccdc8dde229dfec4ff26b4f0a 100644
--- a/roles/quassel/tasks/main.yml
+++ b/roles/quassel/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install quassel
   pacman: name=quassel-core,python-pexpect state=present
 
diff --git a/roles/rebuilderd_worker/handlers/main.yml b/roles/rebuilderd_worker/handlers/main.yml
index 039b2657143ca4384474de52d23dd8fc750d142a..b7dd1329ddc3a1ab0c1adb00e3c6fc5bf0f3ee5d 100644
--- a/roles/rebuilderd_worker/handlers/main.yml
+++ b/roles/rebuilderd_worker/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: daemon reload
   systemd:
     daemon-reload: true
diff --git a/roles/redirects/tasks/main.yml b/roles/redirects/tasks/main.yml
index aa0bc60e2a812df59bb4a30cc4978fa6e1ed036d..5d18d2cc3e9e89ddc59fc25a52994075b31a9010 100644
--- a/roles/redirects/tasks/main.yml
+++ b/roles/redirects/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/redis/tasks/main.yml b/roles/redis/tasks/main.yml
index fa1ca6b57630426a0d68bb112dc8c4ec76f97478..be5d43cbf6b4d40bf0004b72803395b25ca51d00 100644
--- a/roles/redis/tasks/main.yml
+++ b/roles/redis/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install redis
   pacman: name=redis state=present
 
diff --git a/roles/root_ssh/defaults/main.yml b/roles/root_ssh/defaults/main.yml
index 35e935459a5de12cf435525a00e4425df08e31a2..36ebe27cbbe29501561741361c09df1612da6dc8 100644
--- a/roles/root_ssh/defaults/main.yml
+++ b/roles/root_ssh/defaults/main.yml
@@ -1,2 +1 @@
----
 root_ssh_directory: /root/.ssh
diff --git a/roles/root_ssh/tasks/main.yml b/roles/root_ssh/tasks/main.yml
index 1e7f3ddb7d2064993a3a80394ab8ea1931abc8d7..153420e85854a5c75e8fb5ef9ff90198443e336a 100644
--- a/roles/root_ssh/tasks/main.yml
+++ b/roles/root_ssh/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create .ssh directory
   file: path={{ root_ssh_directory }} state=directory owner=root group=root mode=0700
 
diff --git a/roles/rspamd/handlers/main.yml b/roles/rspamd/handlers/main.yml
index 1f5290af783d1c74c1b3f5881f13116bd5376af5..ee62a96196cef0dd558653b20e971d65d94ff9e8 100644
--- a/roles/rspamd/handlers/main.yml
+++ b/roles/rspamd/handlers/main.yml
@@ -1,3 +1,2 @@
----
 - name: reload rspamd
   service: name=rspamd state=reloaded
diff --git a/roles/rspamd/meta/main.yml b/roles/rspamd/meta/main.yml
index 89a7c927aaf316355efafaf65edadb6a1b161e2a..cab6145cb35f38ba852c6c92d0c52fcd1175b5aa 100644
--- a/roles/rspamd/meta/main.yml
+++ b/roles/rspamd/meta/main.yml
@@ -1,3 +1,2 @@
----
 dependencies:
   - role: redis
diff --git a/roles/rspamd/tasks/main.yml b/roles/rspamd/tasks/main.yml
index 897a8860c3b674e5506a445eadf64c786e17eb88..9ed46fb09e7fcd6182ff2f0d0ec5ccf23569e12f 100644
--- a/roles/rspamd/tasks/main.yml
+++ b/roles/rspamd/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install rspamd
   pacman: name=rspamd state=present
 
diff --git a/roles/rsync_net/tasks/main.yml b/roles/rsync_net/tasks/main.yml
index a160d559503a69014fbdc2b41340e674c4846e3c..921ffe4a58f9b2e23d99545f9ac30445d10ec76e 100644
--- a/roles/rsync_net/tasks/main.yml
+++ b/roles/rsync_net/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 # This role runs on localhost; use commands like sftp to upload configuration
 
 - name: create the root backup directory at {{ backup_dir }}
diff --git a/roles/security_tracker/defaults/main.yml b/roles/security_tracker/defaults/main.yml
index 83760d500e68a9fa6a7f189f2215a2af9693c869..0af6cccdc37ab868c6c0c92db1e31b409ab04ab0 100644
--- a/roles/security_tracker/defaults/main.yml
+++ b/roles/security_tracker/defaults/main.yml
@@ -1,2 +1 @@
----
 security_tracker_version: "40be7f90f303c5601bf522b04382f57587b60e3c"
diff --git a/roles/security_tracker/handlers/main.yml b/roles/security_tracker/handlers/main.yml
index a4011489df7127f43a980c00172b63db18007504..fa9341630a677f2be051322690226f7abcb9dc90 100644
--- a/roles/security_tracker/handlers/main.yml
+++ b/roles/security_tracker/handlers/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: upgrade database
   become: true
   become_user: security
diff --git a/roles/security_tracker/tasks/main.yml b/roles/security_tracker/tasks/main.yml
index 4828bc11606e08cd8156bd7f0e94d78cd2135c43..7adb2750601166d292df5fb55634577304e8b489 100644
--- a/roles/security_tracker/tasks/main.yml
+++ b/roles/security_tracker/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: run maintenance mode
   include_role:
     name: maintenance
diff --git a/roles/sources/tasks/main.yml b/roles/sources/tasks/main.yml
index 14f758abc22679d15efd772e92bf0dc85fc1a5ac..a45450614fba9ac33a77a36369e8afdc9d54867a 100644
--- a/roles/sources/tasks/main.yml
+++ b/roles/sources/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/sshd/defaults/main.yml b/roles/sshd/defaults/main.yml
index 3b16b40361437694d77b26d56576d9b6694ceb62..b50e991b0a17129c8420460be9890c31a5b7ec5a 100644
--- a/roles/sshd/defaults/main.yml
+++ b/roles/sshd/defaults/main.yml
@@ -1,3 +1,2 @@
----
 sshd_includes_dir: '/etc/ssh/ssh.d'
 sshd_enable_includes: false
diff --git a/roles/sshd/handlers/main.yml b/roles/sshd/handlers/main.yml
index 0cd3279ed7649a9ddaf16f1bbe4db97072a114da..d63f84c8aa4a661bdbdc34d7af5c67bb63979ad7 100644
--- a/roles/sshd/handlers/main.yml
+++ b/roles/sshd/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart sshd
   service: name=sshd state=restarted
diff --git a/roles/sshd/tasks/main.yml b/roles/sshd/tasks/main.yml
index 821a1f29ec6fffacbfa5eac4d5c87b73a059c4c9..a594e0d487c0e3e57bc42821703d821f8fc7cd55 100644
--- a/roles/sshd/tasks/main.yml
+++ b/roles/sshd/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install openssh
   pacman: name=openssh state=present
 
diff --git a/roles/sudo/defaults/main.yml b/roles/sudo/defaults/main.yml
index c1bcb7763bf5b8bb8b648dd37c94968b7a6176a8..c04b84d52648c9ff07f39d4107689a458d4e5676 100644
--- a/roles/sudo/defaults/main.yml
+++ b/roles/sudo/defaults/main.yml
@@ -1,3 +1,2 @@
----
 sudo_users:
   - root
diff --git a/roles/sudo/tasks/main.yml b/roles/sudo/tasks/main.yml
index e5446b5b6119effde7ec25e5cb20eb64629e0032..e560152455e76b2586b8c4a88f5a385f82031bad 100644
--- a/roles/sudo/tasks/main.yml
+++ b/roles/sudo/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install sudo
   pacman: name=sudo state=present
 
diff --git a/roles/syncarchive/tasks/main.yml b/roles/syncarchive/tasks/main.yml
index 4bc88d3ac882909d95cd3fb3502963ae04e4c06f..8ac16dc5388a3faa38fa8e9b60dded38e6e67cac 100644
--- a/roles/syncarchive/tasks/main.yml
+++ b/roles/syncarchive/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install rsync
   pacman: name=rsync state=present
 
diff --git a/roles/syncdebug/tasks/main.yml b/roles/syncdebug/tasks/main.yml
index 0220b069986e9402fdbe919a79ddd3077f5ce83f..e315e87dfb6590493d5dc6f23c31524c8c120ef7 100644
--- a/roles/syncdebug/tasks/main.yml
+++ b/roles/syncdebug/tasks/main.yml
@@ -1,4 +1,3 @@
----
 - name: install rsync
   pacman: name=rsync state=present
 
diff --git a/roles/syncrepo/tasks/main.yml b/roles/syncrepo/tasks/main.yml
index 8351310c7344bea02bbf9dd6f431345ac4c42051..5dc6efe9dbbfd1b50fb5e30a6bad25e9584bd137 100644
--- a/roles/syncrepo/tasks/main.yml
+++ b/roles/syncrepo/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create ssl cert
   include_role:
     name: certificate
diff --git a/roles/terraform_state/defaults/main.yml b/roles/terraform_state/defaults/main.yml
index ab878320695f8528d472bfa5eb4e730884a9c69e..185bbe2423d8d2bab708f3df89efc7e26dfa9c50 100644
--- a/roles/terraform_state/defaults/main.yml
+++ b/roles/terraform_state/defaults/main.yml
@@ -1,4 +1,2 @@
----
-
 terraform_db_user: "terraform"
 terraform_db: "terraform"
diff --git a/roles/terraform_state/tasks/main.yml b/roles/terraform_state/tasks/main.yml
index e63e9649a87fb4a08226fc6236534788e50c04ba..d602387d4d307fa7f3dccbc0d9f36104423f721b 100644
--- a/roles/terraform_state/tasks/main.yml
+++ b/roles/terraform_state/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: create terraform state db
   postgresql_db: db="{{ terraform_db }}"
   become: true
diff --git a/roles/tools/tasks/main.yml b/roles/tools/tasks/main.yml
index 3e9d362dcf6b1747eb555b97581d079056c19f65..f72b609f389ca9056756b40720370cbe2a3e51f8 100644
--- a/roles/tools/tasks/main.yml
+++ b/roles/tools/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install misc utils
   pacman:
     state: present
diff --git a/roles/unbound/handlers/main.yml b/roles/unbound/handlers/main.yml
index ef5f8924d7f994702ff60f063921e5e9d098578a..3bf127d2b99db687351795ae89c2b56d93133af8 100644
--- a/roles/unbound/handlers/main.yml
+++ b/roles/unbound/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart unbound
   service: name=unbound state=restarted
diff --git a/roles/unbound/tasks/main.yml b/roles/unbound/tasks/main.yml
index cc15621110cef3d04b8cec82964081f79b3d594f..ecde0575fc7527a169526324fb3254a2c341055e 100644
--- a/roles/unbound/tasks/main.yml
+++ b/roles/unbound/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: Install unbound
   pacman: name=unbound
 
diff --git a/roles/uwsgi/handlers/main.yml b/roles/uwsgi/handlers/main.yml
index 34f9832edaf5ef6482d0e7c8a98de1b6e190998a..1bc35c1ed90105d5363e2a49c5ac73141928b111 100644
--- a/roles/uwsgi/handlers/main.yml
+++ b/roles/uwsgi/handlers/main.yml
@@ -1,4 +1,2 @@
----
-
 - name: restart emperor.uwsgi
   service: name=emperor.uwsgi state=restarted
diff --git a/roles/uwsgi/tasks/main.yml b/roles/uwsgi/tasks/main.yml
index 6ab55a5683d2c293f6873fef50c0256fe952b1ea..a09b00d734b900bcfcca3b2c12b7ede3ba693160 100644
--- a/roles/uwsgi/tasks/main.yml
+++ b/roles/uwsgi/tasks/main.yml
@@ -1,5 +1,3 @@
----
-
 - name: install uwsgi
   pacman: name=uwsgi,uwsgitop state=present
 
diff --git a/roles/wireguard/handlers/main.yml b/roles/wireguard/handlers/main.yml
index c18d90f7f6cfe891fdf560c588af3f2090085665..3b8c69445fef7d9135012331927d780a71f9dc0f 100644
--- a/roles/wireguard/handlers/main.yml
+++ b/roles/wireguard/handlers/main.yml
@@ -1,4 +1,3 @@
----
 # https://github.com/systemd/systemd/issues/9627
 - name: delete wg0
   command: networkctl delete wg0
diff --git a/roles/wireguard/tasks/main.yml b/roles/wireguard/tasks/main.yml
index 527b19545d71d2c891e9cc5a9db5eb5b0a984990..e40ae064afa976a46a19720a091b340ebfb32bba 100644
--- a/roles/wireguard/tasks/main.yml
+++ b/roles/wireguard/tasks/main.yml
@@ -1,4 +1,3 @@
----
 # Used for debugging
 - name: install wireguard-tools
   pacman: name=wireguard-tools state=present