---
- name: CIS - Get OS specific vars
  include_vars: "{{ item }}"
  with_first_found:
    - "os/{{ ansible_os_family }}/{{ ansible_distribution_major_version }}.yaml"
    - "os/{{ ansible_os_family }}.yaml"

- include_tasks: auditd.yaml
- include_tasks: limits.yaml
- include_tasks: proc.yaml
- include_tasks: sudo.yaml
- include_tasks: file_security.yaml
- include_tasks: cron.yaml
- include_tasks: ssh.yaml
- include_tasks: sysctl.yaml
- include_tasks: logindefs.yaml
- include_tasks: journald.yaml
- include_tasks: rsyslog.yaml
- include_tasks: aide.yaml