49 lines
925 B
YAML
49 lines
925 B
YAML
|
# Bootstrap
|
|||
|
|
- src: robertdebock.bootstrap
|
|||
|
|
# Locales
|
|||
|
|
- src: robertdebock.locale
|
|||
|
|
# System update
|
|||
|
|
- src: robertdebock.update
|
|||
|
|
|
|||
|
|
# Manage users
|
|||
|
|
- src: GROG.user
|
|||
|
|
# Manage sudoers
|
|||
|
|
- src: GROG.sudo
|
|||
|
|
# Manage authorized-keys
|
|||
|
|
- src: GROG.authorized-key
|
|||
|
|
# Unattended upgrades
|
|||
|
|
- src: jnv.unattended-upgrades
|
|||
|
|
# ssh security
|
|||
|
|
- src: dev-sec.ssh-hardening
|
|||
|
|
|
|||
|
|
# fail2ban
|
|||
|
|
- src: oefenweb.fail2ban
|
|||
|
|
# firewall conf
|
|||
|
|
# TODO it destroy the DOCKER rules…
|
|||
|
|
#- src: geerlingguy.firewall
|
|||
|
|
# Rootkit protection
|
|||
|
|
- src: mablanco.antirootkits
|
|||
|
|
# antivirus
|
|||
|
|
- src: geerlingguy.clamav
|
|||
|
|
# docker
|
|||
|
|
- src: geerlingguy.docker
|
|||
|
|
|
|||
|
|
# timezone
|
|||
|
|
- src: oefenweb.timezone
|
|||
|
|
# hostname
|
|||
|
|
- src: oefenweb.hostname
|
|||
|
|
# ntp
|
|||
|
|
- src: geerlingguy.ntp
|
|||
|
|
|
|||
|
|
# logrotate
|
|||
|
|
# - src: ontic/logrotate
|
|||
|
|
# apparmor ?
|
|||
|
|
# - src: manala.apparmor
|
|||
|
|
# autofs
|
|||
|
|
# - src: cmprescott.autofs_ng
|
|||
|
|
# smart TODO
|
|||
|
|
#- src: stuvusit/smartd
|
|||
|
|
# graylog Nope, too heavy…
|
|||
|
|
# TODO lininfile for prometheus
|
|||
|
|
# 127.0.1.1 docker-host
|