---
- hosts: "{{ HOSTS }}"
  become: yes
  vars:
    report_server: node1
  
  tasks:
  - name: Ensure Unix/Linux platforms only
    assert:
      that: ansible_os_family != "Windows"

  - name: Scan packages (Unix/Linux)
    demo.patching.scan_packages:
      os_family: "{{ ansible_os_family }}"

  - name: Scan services (Unix/Linux)
    demo.patching.scan_services:

  - block:
    - yum:
        name: httpd
        state: latest

    - service:
        name: httpd
        state: started

    - include_role:
        name: demo.patching.build_report_linux

    - include_role:
        name: demo.patching.build_report_linux_patch
    delegate_to: "{{ report_server }}"
    run_once: yes