---
- name: Apply kernel/network sysctl hardening
  ansible.posix.sysctl:
    name: "{{ item.key }}"
    value: "{{ item.value }}"
    sysctl_file: /etc/sysctl.d/60-linux-baseline.conf
    sysctl_set: true
    state: present
    reload: true
  loop: "{{ linux_baseline_sysctl | dict2items }}"
  loop_control:
    label: "{{ item.key }}"