refactor(cis): extract hardcoded values to cis_defaults and add _normalize.yml

2026-02-21 01:26:31 +01:00
parent bef15af69f
commit f74ec325ea
8 changed files with 99 additions and 79 deletions
--- a/roles/cis/tasks/main.yml
+++ b/roles/cis/tasks/main.yml
@@ -1,4 +1,7 @@
 ---
+- name: Normalize CIS configuration
+  ansible.builtin.include_tasks: _normalize.yml
+
 - name: Include CIS hardening tasks
  ansible.builtin.include_tasks: "{{ cis_task }}"
  loop: