---
# ============================================================================
# sysctl baseline
# ============================================================================
# Delivered as a drop-in under /etc/sysctl.d/ so each setting is
# self-documenting and removable.
# ============================================================================

- name: Deploy mk-labs sysctl drop-in
  ansible.builtin.template:
    src: 99-mk-labs.conf.j2
    dest: /etc/sysctl.d/99-mk-labs.conf
    owner: root
    group: root
    mode: "0644"
  notify: Reload sysctl