diff --git a/ansible/playbooks/init-rocky-ansible-host.yml b/ansible/playbooks/init-rocky-ansible-host.yml
index fe795f1..3c6e57d 100644
--- a/ansible/playbooks/init-rocky-ansible-host.yml
+++ b/ansible/playbooks/init-rocky-ansible-host.yml
@@ -39,10 +39,14 @@
         -r {{ installation_prefix }}roles/requirements.yml
         -p {{ installation_prefix }}{{ collection_installation_dir }}
 
-    - name: cleanup old ssh known_hosts
+    - name: cleanup old ssh known_hosts - remove
       file:
         path: "../tmp/known_hosts"
         state: absent
-    - file:
+        mode: "0644"
+
+    - name: cleanup old ssh known_hosts - blank
+      file:
         path: "../tmp/known_hosts"
         state: touch
+        mode: "0644"
diff --git a/ansible/playbooks/tasks/variable_loader_common.yml b/ansible/playbooks/tasks/variable_loader_common.yml
index 8c71824..a0c4f48 100644
--- a/ansible/playbooks/tasks/variable_loader_common.yml
+++ b/ansible/playbooks/tasks/variable_loader_common.yml
@@ -10,7 +10,7 @@
       include_vars: "{{ item }}"
       with_first_found:
         - "ipaserver.yml"
-      when: "'ipa' in group_names"
+      when: "'ipaserver' in group_names"
 
     - name: Check if system is EFI
       stat: