diff --git a/host_vars/irc.adm.crans.org.yml b/host_vars/irc.adm.crans.org.yml
index bf956da8c254ff50f98bcadbb72cea0dc4625d28..a093bda0c29133822fefedd0470611661e746680 100644
--- a/host_vars/irc.adm.crans.org.yml
+++ b/host_vars/irc.adm.crans.org.yml
@@ -6,7 +6,7 @@ interfaces:
 loc_certbot:
   - dns_rfc2136_server: '172.16.10.147'
     dns_rfc2136_name: certbot_challenge.
-    dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
+    dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
     mail: root@crans.org
     certname: crans.org
     domains: "irc.crans.org"
diff --git a/plays/nginx.yml b/plays/nginx.yml
index f2895803099141067faed8585ed2cc72c6b8cde4..7cb58317f665513bc97bfdb553b81323f5edc2b8 100755
--- a/plays/nginx.yml
+++ b/plays/nginx.yml
@@ -1,7 +1,7 @@
 #!/usr/bin/env ansible-playbook
 ---
 # Deploy Nginx
-- hosts: nginx
+- hosts: nginx,!adh_server
   vars:
     nginx: '{{ glob_nginx | default({}) | combine(loc_nginx | default({})) }}'
   roles:
diff --git a/roles/thelounge/templates/config.js.j2 b/roles/thelounge/templates/config.js.j2
index 3dd10515c577c0f5184834296d49d1aabe9ba59c..87ce22dad10c6d6af5f8f9529b54a9379953dc3d 100644
--- a/roles/thelounge/templates/config.js.j2
+++ b/roles/thelounge/templates/config.js.j2
@@ -392,7 +392,7 @@ module.exports = {
 		// - `enable`: when set to `false`, LDAP support is disabled and all other
 		//   values are ignored.
 		enable: {{ thelounge.ldap_enable }},
-
+{% if thelounge.ldap_enable == "true" %}
 		// - `url`: A url of the form `ldaps://<ip>:<port>`.
 		//   For plain connections, use the `ldap` scheme.
 		url: "{{ thelounge.ldap.url }}",
@@ -442,6 +442,7 @@ module.exports = {
 			//   - `scope`: LDAP search scope. It is set to `"sub"` by default.
 			scope: "{{ thelounge.ldap.scope }}",
 		},
+{% endif %}
 	},
 
 	// ## Debugging settings