# infra-run/ansible/playbooks

This directory contains executable Ansible playbooks that coordinate roles, inventories, and operational hardening tasks.

## Diagram

```mermaid
flowchart TD
  A["playbooks"] --> B["Provisioning flows"]
  A --> C["Hardening flows"]
  A --> D["Patch workflows"]
  A --> E["Decommission workflows"]
```

## Notes

- `cis-rhel9-hardening.yml` applies the RHEL 9 CIS-inspired hardening role to Linux inventory targets.
- `cis-debian-ubuntu-hardening.yml` applies the Debian 13 / Ubuntu 26.04 CIS-inspired hardening role to Linux inventory targets.
- `cis-aix7-hardening.yml` applies the IBM AIX 7 CIS-inspired hardening role to AIX inventory targets.
- Use the sanitized inventory under `../inventory/` as a starting point and override defaults per environment.