From 074831833f553a1e52eef40199efac0c6ad619d1 Mon Sep 17 00:00:00 2001
From: Sandwich <sandwich@archworks.co>
Date: Sat, 21 Feb 2026 00:38:32 +0100
Subject: [PATCH] fix: add no_log to credential-handling pre_tasks and
 post_tasks in main.yml

---
 main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/main.yml b/main.yml
index b80ee2c..50a5bd9 100644
--- a/main.yml
+++ b/main.yml
@@ -26,6 +26,7 @@
       confirm: true
   pre_tasks:
     - name: Apply prompted authentication values to system input
+      no_log: true
       vars:
         system_input: "{{ system | default({}) }}"
         system_users_input: "{{ system_input.users | default([]) }}"
@@ -147,6 +148,7 @@
     - name: Set final SSH credentials for post-reboot tasks
       when:
         - post_reboot_can_connect | bool
+      no_log: true
       ansible.builtin.set_fact:
         ansible_user: "{{ system_cfg.users[0].name }}"
         ansible_password: "{{ system_cfg.users[0].password }}"