---
# Global variables for all hosts
ansible_python_interpreter: /usr/bin/python3
ansible_ssh_common_args: '-o StrictHostKeyChecking=no'

# Security configuration
security_hardening: true
fail2ban_enabled: true
ufw_enabled: true

# Monitoring configuration
monitoring_enabled: true
log_retention_days: 30
backup_enabled: true

# SSL/TLS configuration
ssl_cert_path: /etc/ssl/certs
ssl_key_path: /etc/ssl/private