Aucune description
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.

security.yml 851B

12345678910111213141516171819202122232425262728
  1. - name: Install security-related packages
  2. apt: pkg={{ item }} state=installed
  3. with_items:
  4. - fail2ban
  5. - whois
  6. - lynis
  7. - rkhunter
  8. tags:
  9. - dependencies
  10. - name: Copy fail2ban configuration into place
  11. template: src=etc_fail2ban_jail.local.j2 dest=/etc/fail2ban/jail.local
  12. notify: restart fail2ban
  13. - name: Copy fail2ban dovecot configuration into place
  14. copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf
  15. notify: restart fail2ban
  16. - name: Ensure fail2ban is started
  17. service: name=fail2ban state=started
  18. - name: Update sshd config for PFS and more secure defaults
  19. template: src=etc_ssh_sshd_config.j2 dest=/etc/ssh/sshd_config
  20. notify: restart ssh
  21. - name: Update ssh config for more secure defaults
  22. template: src=etc_ssh_ssh_config.j2 dest=/etc/ssh/ssh_config