22 lines
453 B
YAML
22 lines
453 B
YAML
---
|
|
- name: harden node
|
|
hosts:
|
|
- dev-kyiv01-psy-proxmox-main-01
|
|
become: true
|
|
roles:
|
|
- role: harden/fail2ban
|
|
|
|
- role: harden/unattended_upgrades
|
|
|
|
- role: harden/sshd_config
|
|
vars:
|
|
ssh_port: "25105"
|
|
|
|
- role: harden/nftables
|
|
vars:
|
|
nftables_conf_name: "proxmox-nftables.conf.j2"
|
|
ssh_port: "25105"
|
|
ntp_port: "123"
|
|
|
|
# ansible-playbook playbooks/harden/harden_proxmox.yml -i inventory.ini
|