---
- name: Apply ansible-lockdown hardening
hosts: "{{ hosts | default('all') }}"
become: true
roles:
- role: "{{ playbook_dir }}"