---
- name: Create new users and lock down VPS
  hosts: vps1
  remote_user: root
  vars:
    ansible_user: root
    ansible_ssh_private_key_file: "{{ vps_service.ssh_private_key_paths[vps_service.ssh_private_key_path_pref] }}"
  tasks:
    - name: Engage in SSH hardening and user creation
      ansible.builtin.include_role:
        # allow_duplicates: true
        defaults_from: main
        handlers_from: main
        name: bootstrap
        # public: false
        # rolespec_validate: true
        tasks_from: "init@{{ ansible_facts['system'].lowercase() }}"
        vars_from: main