diff --git a/all/playbook.yaml b/all/playbook.yaml
index 22362be..1092c73 100644
--- a/all/playbook.yaml
+++ b/all/playbook.yaml
@@ -203,20 +203,6 @@
         validate: "/usr/sbin/sshd -T -f %s"
       notify:
         - Restart sshd
-    - name: Create www directory if doesn't exist already
-      ansible.builtin.file:
-        path: /var/lib/caddy/www
-        state: directory
-        mode: '0755'
-        owner: caddy
-        group: caddy
-    - name: "Instal VNStat Metrics CGI Script to WWW"
-      ansible.builtin.copy:
-        src: ./files/vnstat-metrics.cgi
-        dest: /var/lib/caddy/www/vnstat-metrics.cgi
-        mode: preserve
-        owner: caddy
-        group: caddy
     - name: "Remove useless passphrase line (runs after borgmatic role)"
       ansible.builtin.lineinfile:
         dest: "/etc/borgmatic/config.yaml"
diff --git a/privfrontends/playbook.yaml b/privfrontends/playbook.yaml
index a271b66..b5ee454 100644
--- a/privfrontends/playbook.yaml
+++ b/privfrontends/playbook.yaml
@@ -38,6 +38,22 @@
         enabled: true
         state: reloaded
       tags: caddy-non-update
+    - name: Create www directory if doesn't exist already
+      ansible.builtin.file:
+        path: /var/lib/caddy/www
+        state: directory
+        mode: '0755'
+        owner: caddy
+        group: caddy
+      tags: caddy-non-update
+    - name: "Instal VNStat Metrics CGI Script to WWW"
+      ansible.builtin.copy:
+        src: ./templates/vnstat-metrics.cgi
+        dest: /var/lib/caddy/www/vnstat-metrics.cgi
+        mode: preserve
+        owner: caddy
+        group: caddy
+      tags: caddy-non-update
 - name: Fail2Ban
   hosts: privfrontends
   tasks:
diff --git a/all/files/vnstat-metrics.cgi b/privfrontends/templates/vnstat-metrics.cgi
similarity index 100%
rename from all/files/vnstat-metrics.cgi
rename to privfrontends/templates/vnstat-metrics.cgi