Gabriel-temstet/Infra-ANSIBLE ? reverse-engineered prompt

Build me a complete Ansible project for a fictional cybersecurity company called NOVASEC, with a full lab environment and all the main security services already wired together.

I want it to set up the whole infrastructure from scratch with clear phases, including a gateway firewall with inter VLAN filtering and Suricata, centralized identity with FreeIPA, a SIEM and XDR stack, a SOC platform with case management and threat intel, DevSecOps tools, a secrets vault, monitoring, vulnerability scanning, backups, and a separate isolated lab for red team tests. It should also manage users, groups, sudo rights, and access rules centrally, so adding a new user is easy.

Please make it feel like a real production ready security environment, with sensible defaults, inventory, roles, variables, and a simple way to run everything or just one phase. If you need current Ansible or app setup details, look up the latest docs online first.