Add backup bind and prom

hardening.yml

@@ -81,19 +81,19 @@
 #||-----> GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available
 
   roles:
-    - robertdebock.update
-    - devsec.hardening.os_hardening
-    - devsec.hardening.ssh_hardening
-    - maxlareo.rkhunter
-    - maxlareo.chkrootkit
-    - robertdebock.auditd
-    - geerlingguy.firewall
-    - grog.management-user
-    - GROG.user
-    - GROG.authorized-key
-    - GROG.sudo
-    - ansible_unattended_upgrades
-    - buluma.lynis
+    # - robertdebock.update
+    # - devsec.hardening.os_hardening
+    # - devsec.hardening.ssh_hardening
+    # - maxlareo.rkhunter
+    # - maxlareo.chkrootkit
+    # - robertdebock.auditd
+    - { role: geerlingguy.firewall, tags: firewall }
+    # - grog.management-user
+    # - GROG.user
+    # - GROG.authorized-key
+    # - GROG.sudo
+    # - ansible_unattended_upgrades
+    # - buluma.lynis
   
   # roles:
   #   - role: netways.elasticstack.elasticsearch
@@ -122,7 +122,7 @@
         line: '#!Enable-HMAC-ETM'
 
     - name: Reload service httpd, in all cases
-      ansible.builtin.systemd_service:
+      ansible.builtin.service:
         name: sshd.service
         state: reloaded