diff --git a/roles/archwiki/handlers/main.yml b/roles/archwiki/handlers/main.yml
index a84ec4253f4a5dea596ff1962081dd6f56fde980..6da9b638e87b3fa8c73466dfa9db2d07466f7ef1 100644
--- a/roles/archwiki/handlers/main.yml
+++ b/roles/archwiki/handlers/main.yml
@@ -1,7 +1,7 @@
 - name: Restart php-fpm@archwiki
   service: name=php-fpm@{{ archwiki_user }} state=restarted
 
-- name: Run wiki updatescript
+- name: Run wiki updatescript  # noqa no-changed-when
   command: php {{ archwiki_dir }}/public/maintenance/update.php --quick
   become: true
   become_user: "{{ archwiki_user }}"
@@ -14,7 +14,7 @@
 # otherwise nginx will spit errors into the log until it is restarted (even
 # reload is not enough).
 # reference: https://stackoverflow.com/a/6896903
-- name: Purge nginx cache
+- name: Purge nginx cache  # noqa no-changed-when
   command: find /var/lib/nginx/cache -type f -delete
 
 # The MediaWiki file cache can be invalidated by deleting the files in the
diff --git a/roles/dovecot/handlers/main.yml b/roles/dovecot/handlers/main.yml
index 9315e0850cb286c92423f536f7956c66a30bc19a..13a4893aadeb788d63612d704cbe1546f1ca26a3 100644
--- a/roles/dovecot/handlers/main.yml
+++ b/roles/dovecot/handlers/main.yml
@@ -1,7 +1,7 @@
 - name: Reload dovecot
   service: name=dovecot state=restarted
 
-- name: Run sievec
+- name: Run sievec  # noqa no-changed-when
   command: /usr/bin/sievec /etc/dovecot/sieve/{{ item }}
   loop:
     - spam-to-folder.sieve
diff --git a/roles/fail2ban/handlers/main.yml b/roles/fail2ban/handlers/main.yml
index 15ca9394841994c75e0853cd3dcc3a0df5f4aa98..a83c6320ae11eaadc61ca0f0ff3fa77472e5a05d 100644
--- a/roles/fail2ban/handlers/main.yml
+++ b/roles/fail2ban/handlers/main.yml
@@ -3,5 +3,5 @@
     name: fail2ban
     state: restarted
 
-- name: Reload fail2ban jails
+- name: Reload fail2ban jails  # noqa no-changed-when
   shell: type fail2ban-server > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null || true) || true
diff --git a/roles/hardening/handlers/main.yml b/roles/hardening/handlers/main.yml
index f3a0d5fa566f66b2ee2a9cc69179d2434c565d52..f85df1daae3b9acd82deba0476441fb2acd354bb 100644
--- a/roles/hardening/handlers/main.yml
+++ b/roles/hardening/handlers/main.yml
@@ -1,2 +1,2 @@
-- name: Apply sysctl settings
+- name: Apply sysctl settings  # noqa no-changed-when
   command: sysctl --system
diff --git a/roles/mailman/handlers/main.yml b/roles/mailman/handlers/main.yml
index 2f46b76228cc48b47756d466d1e7c72c9b017100..91b228e1b68cde5fe5d3e113f243d37d14b842e8 100644
--- a/roles/mailman/handlers/main.yml
+++ b/roles/mailman/handlers/main.yml
@@ -7,7 +7,7 @@
 - name: Reload postfix
   service: name=postfix state=reloaded
 
-- name: Run postmap
+- name: Run postmap  # noqa no-changed-when
   command: postmap /etc/postfix/{{ item }}
   loop:
     - aliases
diff --git a/roles/postfix/handlers/main.yml b/roles/postfix/handlers/main.yml
index 322279f4728671b99711c24ef8239405bae88e94..2267dce371e1c15fffa247b6b4a2a54b0432534c 100644
--- a/roles/postfix/handlers/main.yml
+++ b/roles/postfix/handlers/main.yml
@@ -3,10 +3,10 @@
     name: postfix
     state: restarted
 
-- name: Reload postfix
+- name: Reload postfix  # noqa no-changed-when
   command: postfix reload
 
-- name: Postmap additional files
+- name: Postmap additional files  # noqa no-changed-when
   command: postmap /etc/postfix/{{ item }}
   with_items:
     - access_client
@@ -19,5 +19,5 @@
     - domains
     - msa_header_checks
 
-- name: Update aliases db
+- name: Update aliases db  # noqa no-changed-when
   command: postalias /etc/postfix/aliases
diff --git a/roles/security_tracker/handlers/main.yml b/roles/security_tracker/handlers/main.yml
index 63d6e2b4e4274a1eac0bd66e0c1ec048d1bbeb62..897cfcd0b154d8985350c56f30b2a548f1173020 100644
--- a/roles/security_tracker/handlers/main.yml
+++ b/roles/security_tracker/handlers/main.yml
@@ -1,4 +1,4 @@
-- name: Upgrade database
+- name: Upgrade database  # noqa no-changed-when
   become: true
   become_user: security
   command: /usr/bin/make db-upgrade chdir="{{ security_tracker_dir }}"
diff --git a/roles/wireguard/handlers/main.yml b/roles/wireguard/handlers/main.yml
index 0f6581659625ab04233db7c48ea8469bce3ec964..75b905e7eb38af7176cf81208b31b8ec85de3af9 100644
--- a/roles/wireguard/handlers/main.yml
+++ b/roles/wireguard/handlers/main.yml
@@ -1,10 +1,10 @@
 # https://github.com/systemd/systemd/issues/9627
-- name: Delete wg0
+- name: Delete wg0  # noqa no-changed-when
   command: networkctl delete wg0
   register: result
   failed_when: result.rc not in [0, 1]
   listen: Reload wireguard
 
-- name: Reload .network and .netdev files
+- name: Reload .network and .netdev files  # noqa no-changed-when
   command: networkctl reload
   listen: Reload wireguard