public/Infrastrucutre as Code/Ansible/roles/cis_hardening/service_disable/tasks/main.yml

- name: Ensure list of unnecessary services are stopped and masked
  ansible.builtin.service:
    name: "{{ svc }}"
    enabled: no
    state: stopped
    masked: yes
  loop: "{{ unused_services }}"
  loop_control:
    loop_var: svc
  ignore_errors: true