Drop this variable, we aren't really using it right now.

inventory/group_vars/sign

@@ -1,4 +1,4 @@
 ---
 freezes: true
 postfix_group: sign
-iptables: "{{ files }}/iptables/iptables.sign"
+host_group: sign

roles/base/tasks/main.yml

@@ -86,9 +86,8 @@
   - base
 
 - name: iptables
-  template: src=iptables/{{ item }} dest=/etc/sysconfig/iptables mode=600 backup=yes
+  template: src={{ item }} dest=/etc/sysconfig/iptables mode=600 backup=yes
   with_first_found:
-    - "{{  iptables }}"
     - iptables/iptables.{{ ansible_fqdn }}
     - iptables/iptables.{{ host_group }}
     - iptables/iptables.{{ env }}