---
- name: Create a consolidated sysctl configuration file
  ansible.builtin.copy:
    dest: /mnt/etc/sysctl.d/10-cis.conf
    mode: "0644"
    content: |
      ## CIS Sysctl configurations
      {% for key, value in cis_cfg.sysctl | dictsort %}
      {{ key }}={{ value }}
      {% endfor %}