diff --git a/packer/ansible/nginx_web_proxy.yml b/packer/ansible/nginx_web_proxy.yml
index 9f65235d..08aaea2a 100644
--- a/packer/ansible/nginx_web_proxy.yml
+++ b/packer/ansible/nginx_web_proxy.yml
@@ -5,4 +5,5 @@
     proxy_server_ip: "10.0.1.12"
     proxy_server_port: "8000"
   roles:
+    - linux_universal_forwarder
     - nginx_web_proxy
diff --git a/packer/ansible/roles/nginx_web_proxy/tasks/main.yml b/packer/ansible/roles/nginx_web_proxy/tasks/main.yml
index 16ec157f..2ec114f5 100644
--- a/packer/ansible/roles/nginx_web_proxy/tasks/main.yml
+++ b/packer/ansible/roles/nginx_web_proxy/tasks/main.yml
@@ -1,15 +1,13 @@
 ---
-- include: install_deb_uf.yml
-- include: configure_outputs_conf.yml
+#- include: install_deb_uf.yml
+#- include: configure_outputs_conf.yml
 - include: nginx_web_proxy.yml
-- include: create_deploymentclient.yml
+#- include: create_deploymentclient.yml
 - include: configure_inputs.yml
 
-- name: restart splunk
+- name: Restart splunk uf
   become: true
-  service:
-    name: SplunkForwarder
-    state: restarted
+  command: "systemctl restart SplunkForwarder"
 
 - name: restart nginx again
   become: true
diff --git a/terraform/ansible/roles/linux_server_post/tasks/change_splunk_password.yml b/terraform/ansible/roles/linux_server_post/tasks/change_splunk_password.yml
index 9abea806..a981346f 100644
--- a/terraform/ansible/roles/linux_server_post/tasks/change_splunk_password.yml
+++ b/terraform/ansible/roles/linux_server_post/tasks/change_splunk_password.yml
@@ -3,6 +3,7 @@
 - name: change password splunk
   shell: '/opt/splunkforwarder/bin/splunk edit user admin -password {{ attack_range_password }} -auth admin:Pl3ase-k1Ll-me:p'
   become: yes
+  ignore_errors: yes
 
 - name: Change hostname
   shell: '/opt/splunkforwarder/bin/splunk set default-hostname {{ hostname }} -auth admin:{{ attack_range_password }}'