---
# Internal variables for server hardening
security_packages:
  - ufw
  - fail2ban
  - unattended-upgrades
  - logwatch
  - rkhunter
  - chkrootkit

required_directories:
  - /var/log/security
  - /etc/security/limits.d