---
# Molecule converge playbook - applies roles to test them

- name: Converge
  hosts: all
  become: true
  gather_facts: true

  pre_tasks:
    - name: Update apt cache
      apt:
        update_cache: yes
        cache_valid_time: 3600
      when: ansible_os_family == "Debian"

  roles:
    - role: base_provision
    - role: hardening
    - role: patching

  post_tasks:
    - name: Print Ansible facts
      debug:
        var: ansible_facts