sgratias/semaphore
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

push

Browse Source
This commit is contained in:
sgratias
2024-04-01 18:44:45 +02:00
parent bc94fb2549
commit 7fd978da5f
1 changed files with 24 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
hardening.yml
View File

@@ -2,7 +2,6 @@
# vars: # vars:
become: true become: true
gather_facts: true gather_facts: true
pre_tasks: pre_tasks:
- name: Set hostname - name: Set hostname
@@ -81,33 +80,33 @@
# chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg for error: # chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg for error:
#||-----> GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available #||-----> GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available
# roles: roles:
# - robertdebock.update - robertdebock.update
# - devsec.hardening.os_hardening - devsec.hardening.os_hardening
# - devsec.hardening.ssh_hardening - devsec.hardening.ssh_hardening
# - maxlareo.rkhunter - maxlareo.rkhunter
# - maxlareo.chkrootkit - maxlareo.chkrootkit
# - robertdebock.auditd - robertdebock.auditd
# - geerlingguy.firewall - geerlingguy.firewall
# - grog.management-user - grog.management-user
# - GROG.user - GROG.user
# - GROG.authorized-key - GROG.authorized-key
# - GROG.sudo - GROG.sudo
# - ansible_unattended_upgrades - ansible_unattended_upgrades
# - buluma.lynis - buluma.lynis
# roles: # roles:
# - role: netways.elasticstack.elasticsearch # - role: netways.elasticstack.elasticsearch
# tags: test2 # tags: test2
tasks: tasks:
- name: Update repositories and install foo package - name: Update repositories and install py3-pip package
community.general.apk: community.general.apk:
name: py3-pip name: py3-pip
update_cache: true update_cache: true
delegate_to: localhost delegate_to: localhost
- name: Install bottle python package - name: Install pip package
ansible.builtin.pip: ansible.builtin.pip:
name: "{{ item }}" name: "{{ item }}"
loop: loop:
@@ -122,8 +121,13 @@
firstmatch: true firstmatch: true
line: '#!Enable-HMAC-ETM' line: '#!Enable-HMAC-ETM'
- name: Retrieve private IP address netbird - name: Reload service httpd, in all cases
ansible.builtin.gather_facts: ansible.builtin.systemd_service:
name: sshd.service
state: reloaded
# - name: Retrieve private IP address netbird
# ansible.builtin.gather_facts:
- name: Set host_interfaces list - name: Set host_interfaces list
ansible.builtin.set_fact: ansible.builtin.set_fact:
@@ -141,6 +145,7 @@
when: ansible_facts[item].ipv4.address | ansible.utils.ipaddr('100.96.0.0/16') when: ansible_facts[item].ipv4.address | ansible.utils.ipaddr('100.96.0.0/16')
loop: "{{ host_interfaces }}" loop: "{{ host_interfaces }}"
# - name: Debug fingerprint for ALL hosts # - name: Debug fingerprint for ALL hosts
# debug: # debug:
# msg: "{{ group_names }}" # msg: "{{ group_names }}"