- hosts: webservers become: True gather_facts: True vars: nginx_add_header: [] roles: - role: nginxinc.nginx - role: dev-sec.nginx-hardening