---
- name: Configure template
  hosts: default
  become: true
  roles:
    - role: dnf
      when: ansible_facts['os_family'] == "RedHat"
    - auditd
    - fail2ban
    - journald
    - sshd
    - role: timesyncd
      when: ansible_facts['os_family'] == "Debian"
    - role: ufw
      when: ansible_facts['os_family'] == "Debian"
  post_tasks:
    - name: Clean cloud-init
      ansible.builtin.command: cloud-init clean
      changed_when: false