---
- name: Install roles needed for exposed hosts
  hosts: all
  become: true
  roles:
     - geerlingguy.repo-epel
     - geerlingguy.security
  tasks:
     - cron:
          name: Reboot to load new kernel.
          weekday: 1
          minute: 45
          hour: 11
          user: root
          job: /bin/needs-restarting -r >/dev/null 2>&1 || /sbin/shutdown -r +60 "restarting to apply updates"
          cron_file: reboot