---
- hosts: all
  roles:
    - auto_reboot
    - auto_upgrade
    - client_iptables # OK for Debian (iptables-persistent mode)
    - client_ntp
    - client_resolvers
    - client_tools
    - users_sudo