- hosts: webservers
  become: True
  gather_facts: True
  roles:
    - role: dev-sec.os-hardening

    - role: dev-sec.ssh-hardening
      become: yes

    - dev-sec.nginx-hardening