This role just fills some basic configuration and upate management.
* Locks SSH access down to a non root user and passess basic security measures
* Configures a few basic aliases
* Updates all packages on the system
* Does not by default restart the machine if the kernel updates
* configures yumcron to apply automatic Updates
Two optional settings are
* allow_reboot - Will permit the system to reboot when this playbook is ran if it is necessary
* schedule_update_reboot - Will enable a cronjob to run and check if a reboot is neccessary and reboot the machine
Each of these systems are also tagged so only parts of the playbook can run across many systems
The changelog is stored externally