---
- name: CIS Hardening
  hosts: contabo
  gather_facts: true

  roles:
    - role: "bootstrap"
      tags:
        - roles
        - roles::bootstrap
    - role: "login"
      tags:
        - roles
        - roles::users
    - role: "cis"
      vars:
        # currently aide is failing
        install_aide: false
      tags:
        - roles
        - roles::cis
    - role: "fail2ban"
      tags:
        - roles
        - roles::fail2ban
    - role: "geoip"
      tags:
        - roles
        - roles::geoip
    - role: "duo"
      tags:
        - roles
        - roles::duosecurity