initial commit

playbooks/patch_only.yml

@@ -0,0 +1,10 @@
+---
+# Targeted patch-management run without re-applying the other roles.
+# Intended for scheduled execution (cron/AWX).
+# Run: ansible-playbook playbooks/patch_only.yml
+
+- name: Apply patch management configuration only
+  hosts: linux_all
+  become: true
+  roles:
+    - role: patch_mgmt