This commit is contained in:
2025-08-26 21:06:40 +02:00
parent bebdfc1eff
commit fc5d415d20
8 changed files with 30 additions and 14 deletions

View File

@@ -4,4 +4,5 @@
update_cache: yes
cache_valid_time: 3600
when: ansible_os_family == "Debian"
tags: ['system-update']
tags:
- system-update

View File

@@ -4,8 +4,9 @@
src: sshd_config.j2
dest: /etc/ssh/sshd_config
backup: yes
mode: '0600'
mode: "0600"
owner: root
group: root
notify: restart sshd
tags: ['ssh-config']
tags:
- ssh-config

View File

@@ -3,4 +3,5 @@
package:
name: ufw
state: present
tags: ['firewall-install']
tags:
- firewall-install

View File

@@ -1,7 +1,8 @@
--
---
- name: Install fail2ban
package:
name: fail2ban
state: present
when: fail2ban_enabled
tags: ['fail2ban-install']
tags:
- fail2ban-install

View File

@@ -8,4 +8,5 @@
- bluetooth
- cups
ignore_errors: yes
tags: ['disable-services']
tags:
- disable-services

View File

@@ -1,20 +1,30 @@
---
- name: Include system update tasks
include_tasks: 01-update-system.yml
tags: ['hardening', 'system-update']
tags:
- hardening
- system-update
- name: Include SSH configuration tasks
include_tasks: 02-configure-ssh.yml
tags: ['hardening', 'ssh']
tags:
- hardening
- ssh
- name: Include firewall configuration tasks
include_tasks: 03-configure-firewall.yml
tags: ['hardening', 'firewall']
tags:
- hardening
- firewall
- name: Include fail2ban installation tasks
include_tasks: 04-install-fail2ban.yml
tags: ['hardening', 'fail2ban']
tags:
- hardening
- fail2ban
- name: Include additional hardening tasks
include_tasks: 05-additional-hardening.yml
tags: ['hardening', 'additional']
tags:
- hardening
- additional

View File

@@ -1,4 +1,4 @@
--
---
- name: Verify Java installation
command: java -version
register: java_verify

View File

@@ -1,4 +1,5 @@
name: Create minecraft group
---
- name: Create minecraft group
group:
name: "{{ minecraft_group }}"
state: present