added again ansible-role-security

2024-01-25 14:48:21 +01:00
parent 6dcf62acd7
commit eee0e16ae8
19 changed files with 460 additions and 0 deletions
--- a/roles/ansible-role-security/tasks/main.yml
+++ b/roles/ansible-role-security/tasks/main.yml
@@ -0,0 +1,21 @@
+---
+- name: Include OS-specific variables.
+  include_vars: "{{ ansible_os_family }}.yml"
+
+# Fail2Ban
+- include_tasks: fail2ban.yml
+  when: security_fail2ban_enabled | bool
+
+# SSH
+- include_tasks: ssh.yml
+
+# Autoupdate
+- include_tasks: autoupdate-RedHat.yml
+  when:
+    - ansible_os_family == 'RedHat'
+    - security_autoupdate_enabled | bool
+
+- include_tasks: autoupdate-Debian.yml
+  when:
+    - ansible_os_family == 'Debian'
+    - security_autoupdate_enabled | bool