--- - name: Apply day0 baseline hosts: "{{ target | default('all') }}" become: true roles: - day0-baseline