updated tasks so they are only run once

tasks/pkgs/vault.yml

@@ -1,21 +1,33 @@
 # vim: set filetype=yaml.ansible :
 ---
-- name: Append to pkgs
+- name: Add vault
+  when:
+    - vault_configured is undefined
   block:
-    - name: MacOS specific
-      when:
-        - ansible_system == 'Darwin'
-      notify:
-        - Depend hashicorp repo
-      changed_when: true
-      ansible.builtin.set_fact:
-        pkg_tap: "{{ pkg_tap + vault.pkgs }}"
+    - name: Load vault config
+      ansible.builtin.include_tasks:
+        file: config/vault.yml
 
-    - name: Linux specific
-      when:
-        - ansible_system == 'Linux'
-      notify:
-        - Depend hashicorp repo
-      changed_when: true
-      ansible.builtin.set_fact:
-        pkg_sys: "{{ pkg_sys + vault.pkgs }}"
+    - name: Append to pkgs
+      block:
+        - name: MacOS specific
+          when:
+            - ansible_system == 'Darwin'
+          notify:
+            - Depend hashicorp repo
+          changed_when: true
+          ansible.builtin.set_fact:
+            pkg_tap: "{{ pkg_tap + vault.pkgs }}"
+
+        - name: Linux specific
+          when:
+            - ansible_system == 'Linux'
+          notify:
+            - Depend hashicorp repo
+          changed_when: true
+          ansible.builtin.set_fact:
+            pkg_sys: "{{ pkg_sys + vault.pkgs }}"
+
+        - name: Set vault_configured
+          ansible.builtin.set_fact:
+            vault_configured: true