---

- name: Apply ansible-lockdown hardening
  hosts: "{{ hosts | default('all') }}"
  become: true
  roles:
    - role: "{{ playbook_dir }}"