---
- name: manage_root
  hosts: servers # @NOTE for IPv6, switch to 'servers6' instead of 'servers4'--for both, 'servers'
  remote_user: root # MUST be run as root
  vars:
    ansible_user: root
    # ansible_ssh_user: root
  vars_prompt:
    - name: ansible_password
      prompt: Enter pasword for root user of VPS
      unsafe: yes
      private: yes
    # - name: ansible_ssh_pass
    #   prompt: Enter pasword for root user of VPS
    #   unsafe: yes
    #   private: yes
  tasks:
    - name: Set up sys-admin account on VPS and secure VPS
      ansible.builtin.include_role:
        name: lockdown
        defaults_from: main
        vars_from: main
        handlers_from: main
        tasks_from: main
      tags:
        - init