try out lists of base removals as vars instead of with_items

tasks/base.yml

@@ -66,26 +66,21 @@
 
 - name: default pkgs to remove on fedora
   action: yum state=removed name=$item
-  with_items:
-  - firewalld
-  - PackageKit*
-  - sendmail
-  - at
+  with_items: $base_pkgs_erase
   only_if: '$is_fedora'
   tags:
   - packages
 
 - name: pkgs to install on fedora
   action: yum state=installed name=$item
-  with_items:
-  - iptables-services
+  with_items: $base_pkgs_inst
   only_if: '$is_fedora'
   tags:
   - packages
 
 - name: disabled services on fedora
   action: service state=stopped enabled=false name=$item
-  with_items:
+  with_items: $service_disabled
   only_if: '$is_fedora'
   tags:
   - service

vars/Fedora.yml

@@ -1,2 +1,6 @@
 ---
 dist_tag: f${ansible_distribution_version}
+base_pkgs_inst: ['iptables-services' ]
+base_pkgs_erase: ['firewalld', 'PackageKit*', 'sendmail', 'at']
+service_disabled: [ ]
+service_enabled: [ ]

vars/RedHat.yml

@@ -1,2 +1,4 @@
 ---
-dist_tag: el${ansible_distribution_version[0]}
+dist_tag: el${ansible_distribution_version[0]}
+base_pkgs_inst: [ ]
+base_pkgs_erase: [ ]