pi-ansible/roles/os_config/tasks/pkgs.yml

# vim: ft=yaml.ansible
---
- name: Upgrade system packages
  apt:
    update_cache: true
    upgrade: full

- name: Install packages via apt
  apt:
    name: "{{ pkgs }}"
    state: present
  vars:
    pkgs:
      - apparmor
      - haveged
      - needrestart
      - python3-pip
      - ufw