37 lines
672 B
YAML
37 lines
672 B
YAML
|
---
|
||
|
|
- name: CIS Hardening
|
||
|
|
hosts: contabo
|
||
|
|
gather_facts: true
|
||
|
|
|
||
|
|
roles:
|
||
|
|
- role: "bootstrap"
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::bootstrap
|
||
|
|
- role: "manage_users"
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::users
|
||
|
|
- role: "cis_hardening"
|
||
|
|
vars:
|
||
|
|
# currently aide is failing
|
||
|
|
install_aide: false
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::cis
|
||
|
|
- roles::cis::ufw
|
||
|
|
- roles::cis::sysctl
|
||
|
|
- role: "fail2ban"
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::fail2ban
|
||
|
|
- role: "geoip"
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::geoip
|
||
|
|
- role: "duo_security"
|
||
|
|
tags:
|
||
|
|
- roles
|
||
|
|
- roles::duosecurity
|
||
|
|
|