diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index c763e79b6f45908f81f321377a036a8251fba3d6..5e34b3d906d6c911555bdcc0336b7ceb98d9c080 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -22,8 +22,8 @@ test-job:
     - "shell"
   script:
     # make sure that Ansible Vaults are present and can be decrypted
-    - echo "${VAULT_VALIDATORS}" > ../lza_validators.pass
-    - export ANSIBLE_VAULT_IDENTITY_LIST="../lza_validators.pass"
+    - echo "${VAULT_VALIDATORS}" > ../../../lza_validators.pass
+    - export ANSIBLE_VAULT_IDENTITY_LIST="../../../lza_validators.pass"
     - rm -rf ../ansible_vaults/
     - git clone https://gitlab+deploy-token-25:${VAULT_ACCESS_TOKEN}@git.slub-dresden.de/slub-referat-2-3/ansible_vaults.git ../ansible_vaults/; \
     # run Molecule tests
diff --git a/molecule/virtualbox/molecule.yml b/molecule/virtualbox/molecule.yml
index 5b115612f4877d22ac25fdfef095b9b0231e3ce4..818251cc6c96f0cc9314676737ad4290ae6ca204 100644
--- a/molecule/virtualbox/molecule.yml
+++ b/molecule/virtualbox/molecule.yml
@@ -29,7 +29,7 @@ provisioner:
     defaults:
       # https://stackoverflow.com/questions/57435811/ansible-molecule-pass-multiple-vault-ids
       # vault_identity_list: "@$HOME/.ansible/roles/lza_install_common.pass, @$HOME/.ansible/roles/passfile_1.pass"
-      vault_identity_list: "../lza_validators.pass"
+      vault_identity_list: "../../../lza_validators.pass"
   vvv: false
   playbooks:
     # create: ../resources/playbooks/create.yml