2026-08-03 12:26:42 +08:00
|
|
|
---
|
|
|
|
|
# Baseline starts audit-only. Opt-in variables are deliberately false by default.
|
|
|
|
|
- name: Apply controlled common baseline
|
2026-08-03 16:01:35 +08:00
|
|
|
# The baseline role is OS-level and does not assume Docker Compose, so it
|
|
|
|
|
# applies to the Matrix K3s node as well as the Compose hosts.
|
|
|
|
|
hosts: all
|
2026-08-03 12:26:42 +08:00
|
|
|
become: true
|
|
|
|
|
gather_facts: false
|
|
|
|
|
roles:
|
|
|
|
|
- role: baseline
|
|
|
|
|
tags: [baseline, audit]
|
