Unify when clauses position

Author: MattiSG

roles/chromium/tasks/main.yml

@@ -1,21 +1,21 @@
 ---
 - name: Install Chromium — Debian
+  when: ansible_distribution == 'Debian'
   ansible.builtin.apt:
     pkg:
       - chromium
     update_cache: true
     state: latest
-  when: ansible_distribution == 'Debian'
 
 - name: Install Chromium — Ubuntu
+  when: ansible_distribution == 'Ubuntu'
   ansible.builtin.apt:
     pkg:
       - chromium-browser
     update_cache: true
     state: latest
-  when: ansible_distribution == 'Ubuntu'
 
 # See https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md#recommended-enable-user-namespace-cloning
 - name: Enable user namespace cloning to allow running Chromium in a sandbox
-  ansible.builtin.command: sysctl -w kernel.unprivileged_userns_clone=1
   when: ansible_facts['architecture'] != 'aarch64'
+  ansible.builtin.command: sysctl -w kernel.unprivileged_userns_clone=1

roles/github/tasks/main.yml

@@ -6,13 +6,13 @@
   delegate_to: localhost
 
 - name: Add GitHub Bot SSH key
+  when: github_bot_private_key_file.stat.exists
   ansible.builtin.copy:
     src: "{{ inventory_dir }}/github-bot-private-key"
     dest: /home/{{ ansible_user }}/.ssh/ota-github-bot-key
     owner: "{{ ansible_user }}"
     group: "{{ ansible_user }}"
     mode: "600"
-  when: github_bot_private_key_file.stat.exists
 
 - name: Add GitHub SSH key to known_hosts
   ansible.builtin.known_hosts:

roles/ota/git_database/tasks/main.yml

@@ -12,12 +12,12 @@
   register: existing_repository
 
 - name: Obtain initial data from branch {{ ota_git_database_branch }} of {{ ota_git_database_repository }}
+  when: existing_repository.before is defined and not existing_repository.before # if existing_repository.before is null, then the repository is new
   ansible.builtin.git:
     repo: "{{ ota_git_database_repository }}"
     version: "{{ ota_git_database_branch }}"
     dest: "{{ ota_git_database_directory }}"
     key_file: /home/{{ ansible_user }}/.ssh/ota-github-bot-key
-  when: existing_repository.before is defined and not existing_repository.before # if existing_repository.before is null, then the repository is new
 
 - name: Configure {{ ota_git_database_directory }} repository to use the GitHub Bot SSH Key
   community.general.git_config:

roles/pm2/manage/tasks/main.yml

@@ -6,12 +6,12 @@
     - stop
 
 - name: Stop Open Terms Archive applications
+  when: pm2_config.stat.exists
   ansible.builtin.command:
     cmd: pm2 delete pm2.config.cjs
     chdir: /home/{{ ansible_user }}/{{ ota_directory }}
   tags:
     - stop
-  when: pm2_config.stat.exists
 
 - name: Copy pm2.config.cjs file
   ansible.builtin.copy: