Commit graph

12 commits

Author SHA1 Message Date
NaeiKinDus
888590ed9f
chore!: separated galaxy deps and own collections; modified ansible script generation to use two paths for collections
REQUIRES REGENERATING ansible.cfg!
2025-02-23 00:00:00 +00:00
NaeiKinDus
3701ea6276
fix(security,common)!: moved sysctl and resolvconf tasks from common to security role to fix DNS resolution fail due to firewall rules 2024-08-08 00:00:00 +00:00
NaeiKinDus
b7ba39bce9
feat(security): tightened files mode for ssh configuration and enabled ipv6 on ssh, along with an increase on max sessions from 3 to 5 2024-08-08 00:00:00 +00:00
NaeiKinDus
641bf17fa4
feat(security): add tags to target security role or firewall actions 2024-08-08 00:00:00 +00:00
NaeiKinDus
e52f87a448
feat(security): update / install clamav only if desired version and installed version differs 2024-07-11 00:00:00 +00:00
NaeiKinDus
779f2766f2
refactor!: switch hosts variables to a flat layout 2024-01-21 00:00:00 +00:00
NaeiKinDus
639b01c351
feat(security): added nftables firewall 2023-12-12 00:00:00 +00:00
NaeiKinDus
0829d7807f
feat!: disable facts injection for security purpose 2023-12-10 00:00:00 +00:00
NaeiKinDus
a577af133d
feat(security): update apt source lists to use https instead of http 2023-11-29 00:00:00 +00:00
NaeiKinDus
dafa3fbc54
fix!: fixed molecule tests, rewrote how custom variables are handled for hosts overrides; fixed invalid services names for clamav handlers 2023-11-29 00:00:00 +00:00
NaeiKinDus
726b7668f9
feat: added new roles to match daily driver desktop; full idempotency; several fixes and tweaks; re-added hosts in inventory 2023-11-19 00:00:00 +00:00
NaeiKinDus
e4770a7343
feat: base configuration automation 2023-11-08 00:00:00 +00:00