---
- name: Déployer les paramètres sysctl de hardening
  ansible.builtin.template:
    src: 99-setops-hardening.conf.j2
    dest: /etc/sysctl.d/99-setops-hardening.conf
    owner: root
    group: root
    mode: "0644"
  notify: Reload sysctl
  when: sysctl_hardening_apply | bool