2022-11-18 18:33:37 +01:00
|
|
|
---
|
|
|
|
|
|
2022-11-21 16:52:36 +01:00
|
|
|
- name: "Setup a GNU/Linux target with standards or defined tags"
|
2022-11-18 18:33:37 +01:00
|
|
|
hosts: "{{ target if target is defined else 'planets' }}"
|
|
|
|
|
|
|
|
|
|
roles:
|
2022-11-21 16:52:36 +01:00
|
|
|
- role: hardening-basic
|
|
|
|
|
tags: [hardening, ips, ids]
|
|
|
|
|
|
2022-11-18 18:33:37 +01:00
|
|
|
- role: iptables-persistent
|
2022-11-21 16:52:36 +01:00
|
|
|
tags: [firewall, ips, ids]
|
2022-11-18 18:33:37 +01:00
|
|
|
- role: iptables-basic
|
2022-11-21 16:52:36 +01:00
|
|
|
tags: [firewall, ips, ids]
|
2022-11-18 18:33:37 +01:00
|
|
|
- role: iptables-webserver
|
|
|
|
|
tags: [firewall, webserver]
|
|
|
|
|
|
2022-11-21 12:56:57 +01:00
|
|
|
- role: fail2ban-basic
|
2022-11-21 16:52:36 +01:00
|
|
|
tags: [fail2ban, ips, ids]
|
|
|
|
|
|
2022-11-22 15:04:17 +01:00
|
|
|
- role: ipfs
|
|
|
|
|
tags: [ipfs]
|
|
|
|
|
- role: yggdrasil
|
|
|
|
|
tags: [yggdrasil]
|
2022-11-21 16:52:36 +01:00
|
|
|
|
2022-11-18 18:33:37 +01:00
|
|
|
- role: snort-community
|
2022-11-21 16:52:36 +01:00
|
|
|
tags: [snort, ips, ids]
|
2022-11-22 15:30:41 +01:00
|
|
|
|
|
|
|
|
- role: auditd
|
|
|
|
|
tags: [auditd]
|
