---

- name: "Setup a GNU/Linux target with standards or defined tags"
  hosts: "{{ target if target is defined else 'planets' }}"

  roles:
    # Hardening
    # - role: iptables-persistent
    #   tags: [firewall, ips, ids]

    - role: hardening-basic
      tags: [hardening, ips, ids]
    - role: iptables-basic
      tags: [firewall, ips, ids]
    - role: fail2ban-basic
      tags: [fail2ban, ips, ids]
    - role: auditd
      tags: [auditd]

    - role: iptables-webserver
      tags: [firewall, webserver]

    # Services
    - role: ipfs
      tags: [ipfs]
    - role: yggdrasil
      tags: [yggdrasil]
    - role: snort-community
      tags: [snort, ips, ids]
    - role: dns-filter
      tags: [dns_filter]