- hosts: all
  roles:
    - persistent-firewall
    - enable-fips
    - disable_selinux