---

- include_tasks: hardening.yml
  when: os_hardening_enabled