diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 41a12a3c6e0d526acfd15091d684370237d1a070..5c98df4b270313154fa4769f01501ca591f3ebd9 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -22,8 +22,8 @@ test-job:
     - "shell"
   script:
     # make sure that Ansible Vaults are present and can be decrypted
-    - echo "${VAULT_REPAIR}" > ../lza_repair.pass
-    - export ANSIBLE_VAULT_IDENTITY_LIST="../lza_repair.pass"
+    - echo "${VAULT_REPAIR}" > ../../../lza_repair.pass
+    - export ANSIBLE_VAULT_IDENTITY_LIST="../../../lza_repair.pass"
     - rm -rf ../ansible_vaults/
     - git clone https://gitlab+deploy-token-25:${VAULT_ACCESS_TOKEN}@git.slub-dresden.de/slub-referat-2-3/ansible_vaults.git ../ansible_vaults/; \
     # run Molecule tests
diff --git a/molecule/virtualbox/molecule.yml b/molecule/virtualbox/molecule.yml
index 6cb39359fa3ada320411b1388e7f9d51f8c1fbca..c3040679c95f2826456315f84ccb97230bb05cee 100644
--- a/molecule/virtualbox/molecule.yml
+++ b/molecule/virtualbox/molecule.yml
@@ -25,7 +25,7 @@ provisioner:
     defaults:
       # https://stackoverflow.com/questions/57435811/ansible-molecule-pass-multiple-vault-ids
       # vault_identity_list: "@$HOME/.ansible/roles/lza_install_common.pass, @$HOME/.ansible/roles/passfile_1.pass"
-      vault_identity_list: "../lza_repair.pass"
+      vault_identity_list: "../../../lza_repair.pass"
   vvv: false
   playbooks:
     # create: ../resources/playbooks/create.yml