---
# Tâches principales du durcissement serveur
- import_tasks: 01-update-system.yml
  tags: [hardening, system-update]

- import_tasks: 02-install-security-packages.yml
  tags: [hardening, packages]

- import_tasks: 03-configure-ssh.yml
  tags: [hardening, ssh]

- import_tasks: 04-configure-firewall.yml
  tags: [hardening, firewall]
  when: firewall_enabled | default(true)

- import_tasks: 05-configure-fail2ban.yml
  tags: [hardening, fail2ban]
  when: fail2ban_enabled | default(true)

- import_tasks: 06-manage-ssh-keys.yml
  tags: [hardening, ssh-keys]