Initial ansible onboard

ansible/roles/cis_hardening/templates/etc/login.defs.j2

@@ -0,0 +1,36 @@
+# {{ ansible_managed }}
+
+CHFN_RESTRICT rwh
+DEFAULT_HOME no
+ENCRYPT_METHOD SHA512
+ENV_PATH PATH=/usr/local/bin:/usr/sbin:/usr/bin:/bin:/snap/bin
+ENV_SUPATH PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
+ERASECHAR 0177
+FAILLOG_ENAB yes
+FTMP_FILE /var/log/btmp
+GID_MAX 60000
+GID_MIN 1000
+HUSHLOGIN_FILE .hushlogin
+KILLCHAR 025
+LOGIN_RETRIES 5
+LOGIN_TIMEOUT 60
+LOG_OK_LOGINS yes
+LOG_UNKFAIL_ENAB no
+MAIL_DIR /var/mail
+PASS_MAX_DAYS 60
+PASS_MIN_DAYS 1
+{% if ansible_distribution == "CentOS" %}
+PASS_MIN_LEN 15
+{% endif %}
+PASS_WARN_AGE 7
+SHA_CRYPT_MAX_ROUNDS 65536
+SHA_CRYPT_MIN_ROUNDS 10000
+SU_NAME su
+SYSLOG_SG_ENAB yes
+SYSLOG_SU_ENAB yes
+TTYGROUP tty
+TTYPERM 0600
+UID_MAX 60000
+UID_MIN 1000
+UMASK {{ umask_value }}
+USERGROUPS_ENAB no