init

2026-02-20 05:40:53 +00:00
commit 696c1adf74
191 changed files with 6183 additions and 0 deletions
--- a/ansible/playbooks/harden/harden_proxmox.yml
+++ b/ansible/playbooks/harden/harden_proxmox.yml
@@ -0,0 +1,21 @@
+---
+- name: harden node
+  hosts:
+    - dev-kyiv01-psy-proxmox-main-01
+  become: true
+  roles:
+    - role: harden/fail2ban
+
+    - role: harden/unattended_upgrades
+
+    - role: harden/sshd_config
+      vars:
+        ssh_port: "25105"
+
+    - role: harden/nftables
+      vars:
+        nftables_conf_name: "proxmox-nftables.conf.j2"
+        ssh_port: "25105"
+        ntp_port: "123"
+
+  # ansible-playbook playbooks/harden/harden_proxmox.yml -i inventory.ini