Operations gestite, team reale. Il tuo stack tech, chiavi in mano.

# roles/web/tasks/main.yml
- name: "Provision nginx with hardened defaults"
  hosts: web
  become: true
  vars:
    nginx_version: "1.27"
    tls_min: "TLSv1.3"
  tasks:
    - name: "Install nginx"
      apt:
        name: nginx={{ nginx_version }}*
        state: present
    - name: "Render server config"
      template:
        src: nginx.conf.j2
        dest: /etc/nginx/nginx.conf
      notify: "reload nginx"
    - name: "Verify TLS profile"
      command: /usr/local/bin/tls-check.sh
      register: tls
      changed_when: false