roles_metadata:
  # Bootstrap roles
  base_users:
    initialization: true
    provisioning: false
    compliance: false
    description: "Base user creation tasks"

  disk_resize:
    initialization: true
    provisioning: false
    compliance: true
    description: "Disk resizing tasks"

  docker_gitlab_setup:
    initialization: true
    provisioning: false
    compliance: false
    description: "Docker runtime files moving and homelab repo copy"

  endlessh:
    initialization: true
    provisioning: false
    compliance: false
    description: "Endlessh setup"

  firewall_ssh:
    initialization: true
    provisioning: false
    compliance: true
    description: "Firewall and SSH configuration"

  hostname_network:
    initialization: true
    provisioning: false
    compliance: false
    description: "Set hostname and networking"

  packages:
    initialization: true
    provisioning: false
    compliance: true
    description: "base packages and update tasks"

  portainer_agent:
    initialization: true
    provisioning: false
    compliance: true
    description: "Portainer agent setup"

  root_password:
    initialization: true
    provisioning: false
    compliance: false
    description: "Root password setup"

  zsh_custom:
    initialization: true
    provisioning: false
    compliance: false
    description: "Custom Zsh setup"

  # CIS Hardening roles
  banners:
    initialization: false
    provisioning: false
    compliance: true
    description: "Login banners setup"

  file_permissions:
    initialization: false
    provisioning: false
    compliance: true
    description: "File permissions hardening"

  filesystem_hardening:
    initialization: false
    provisioning: false
    compliance: true
    description: "filesystems hardening"

  kernel_hardening:
    initialization: false
    provisioning: false
    compliance: true
    description: "Kernel hardening tasks"

  password_policy:
    initialization: false
    provisioning: false
    compliance: true
    description: "Password policy enforcement"

  service_disable:
    initialization: false
    provisioning: false
    compliance: true
    description: "Disable unnecessary services"

  ssh_hardening:
    initialization: false
    provisioning: false
    compliance: true
    description: "SSH hardening"

  # SecureVault roles
  haproxy:
    initialization: false
    provisioning: true
    compliance: true
    description: "haproxy deployment"

  vault_agent:
    initialization: true
    provisioning: false
    compliance: false
    description: "vault_agent deployment"

  technitium:
    initialization: false
    provisioning: true
    compliance: false
    description: "technitium deployment"