Files
semaphore/hardening-linux.yml

34 lines
777 B
YAML

- hosts: localtest
#! Need first setup with root access user
become: true
pre_tasks:
- ansible.builtin.apt:
update_cache: yes
- ansible.builtin.apt:
name: "*"
state: latest
- ansible.builtin.apt:
upgrade: safe
- ansible.builtin.apt:
clean: yes
- ansible.builtin.apt:
name: "{{ item }}"
state: latest
loop: "{{ package_repo }}"
when: package_repo is defined
- ansible.builtin.pip:
name: "{{ item }}"
loop: "{{ package_pip }}"
when: package_pip is defined
roles:
- name: singleplatform-eng.users
- name: linux-system-roles.sudo
- name: devsec.hardening.ssh_hardening
- name: devsec.hardening.os_hardening
- name: geerlingguy.firewall