---

- name: "Setup a GNU/Linux target with standards or defined tags"
  hosts: "{{ target if target is defined else 'planets' }}"

  roles:
    - role: hardening-basic
      tags: [hardening, ips, ids]

    - role: iptables-persistent
      tags: [firewall, ips, ids]
    - role: iptables-basic
      tags: [firewall, ips, ids]
    - role: iptables-webserver
      tags: [firewall, webserver]
    - role: iptables-ipfs
      tags: [firewall, ipfs]

    - role: fail2ban-basic
      tags: [fail2ban, ips, ids]

    - yggdrasil

    - role: snort-community
      tags: [snort, ips, ids]