- hosts: all
  roles:
    - enable-fips