---
- hosts: default
  become: true
  roles:
    - bastion
    - security-settings