feat: base configuration automation

2023-11-08 00:00:00 +00:00 · 2023-11-08 00:00:00 +00:00 · e4770a7343
commit e4770a7343
70 changed files with 2489 additions and 0 deletions
--- a/collections/ansible_collections/nullified/infrastructure/roles/security/handlers/main.yml
+++ b/collections/ansible_collections/nullified/infrastructure/roles/security/handlers/main.yml
@ -0,0 +1,28 @@
+---
+- name: '[ssh] restart service'
+  ansible.builtin.systemd_service:
+    name: sshd.service
+    enabled: true
+    state: restarted
+
+- name: '[clamav] daemon reload'
+  ansible.builtin.systemd_service:
+    daemon_reload: true
+
+- name: '[freshclam] restart service'
+  ansible.builtin.systemd_service:
+    name: sshd.service
+    enabled: true
+    state: restarted
+
+- name: '[clamd] wait for signatures'
+  ansible.builtin.wait_for:
+    path: /var/lib/clamav/bytecode.cvd
+    timeout: 600
+    state: present
+
+- name: '[clamd] restart service'
+  ansible.builtin.systemd_service:
+    name: sshd.service
+    enabled: true
+    state: restarted