Created a role for initial lockdown of recent VPS, and started role for basic server configuration

.ansible/roles/lockdown/tasks/deshell.yml

@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: MIT-0
+---
+# tasks file for lockdown
+- name: Disable shell for root user
+  when: ansible_facts["user_id"] != "root"
+  become: true
+  ansible.builtin.user:
+    name: root
+    shell: /sbin/nologin
+  tags:
+    - deshell_root
+  register: root_shell_disabled