25 lines
527 B
YAML
25 lines
527 B
YAML
|
---
|
||
|
|
- name: Appliquer le hardening Debian serveur Chezlepro
|
||
|
|
hosts: all
|
||
|
|
become: true
|
||
|
|
gather_facts: true
|
||
|
|
|
||
|
|
pre_tasks:
|
||
|
|
- name: Vérifier que la cible est Debian
|
||
|
|
ansible.builtin.assert:
|
||
|
|
that:
|
||
|
|
- ansible_facts.distribution == "Debian"
|
||
|
|
fail_msg: "Ce playbook est prévu pour Debian."
|
||
|
|
|
||
|
|
roles:
|
||
|
|
- hardening_packages
|
||
|
|
- sysctl_hardening
|
||
|
|
- core_dumps
|
||
|
|
- unattended_upgrades
|
||
|
|
- apparmor
|
||
|
|
- auditd
|
||
|
|
- fail2ban_ssh
|
||
|
|
- journald
|
||
|
|
- ssh_hardening
|
||
|
|
- nftables_baseline
|