24 lines
527 B
YAML
24 lines
527 B
YAML
---
|
|
- name: Appliquer le groupe serveurs_durcis
|
|
hosts: serveurs_durcis
|
|
become: true
|
|
gather_facts: true
|
|
|
|
pre_tasks:
|
|
- name: Vérifier que la cible est Debian
|
|
ansible.builtin.assert:
|
|
that:
|
|
- ansible_facts.distribution == "Debian"
|
|
fail_msg: "Ce playbook est prévu pour Debian."
|
|
|
|
roles:
|
|
- hardening_packages
|
|
- sysctl_hardening
|
|
- core_dumps
|
|
- unattended_upgrades
|
|
- apparmor
|
|
- auditd
|
|
- fail2ban_ssh
|
|
- journald
|
|
- ssh_hardening
|
|
- nftables_baseline
|