diff --git a/tasks/main.yml b/tasks/main.yml
index b8d6a3680c5812a34bb6afca35b53337cd4ef1e7..c165d6a6044aa3002f50bcb23c83956f01d23bc3 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -13,12 +13,12 @@
 
 - block:
 
-  - import_tasks: vpn.yml
+    - import_tasks: vpn.yml
 
-  - name: Remember that this role had been run
-    set_fact:
-      role_vpn_completed: yes
-    tags:
-      - always
+    - name: Remember that this role had been run
+      set_fact:
+        role_vpn_completed: yes
+      tags:
+        - always
 
   when: not excluded_roles or "vpn" not in excluded_roles and role_vpn_completed is not defined and vpn is defined and vpn.subnet is defined