---
- name: Security Hardening - Layer 1
  hosts: vps
  become: true
  roles:
    - role: fail2ban
      tags: [hardening, security, intrusion-prevention]
    - role: kernel_hardening
      tags: [hardening, security, kernel]
