# Bootstrap - src: robertdebock.bootstrap # Locales - src: robertdebock.locale # System update - src: robertdebock.update # Manage users - src: GROG.user # Manage sudoers - src: GROG.sudo # Manage authorized-keys - src: GROG.authorized-key # Unattended upgrades - src: jnv.unattended-upgrades # ssh security - src: dev-sec.ssh-hardening # fail2ban - src: oefenweb.fail2ban # firewall conf # TODO it destroy the DOCKER rules… #- src: geerlingguy.firewall # Rootkit protection - src: mablanco.antirootkits # antivirus - src: geerlingguy.clamav # docker - src: geerlingguy.docker # timezone - src: oefenweb.timezone # hostname - src: oefenweb.hostname # ntp - src: geerlingguy.ntp # logrotate # - src: ontic/logrotate # apparmor ? # - src: manala.apparmor # autofs # - src: cmprescott.autofs_ng # smart TODO #- src: stuvusit/smartd # graylog Nope, too heavy… # TODO lininfile for prometheus # 127.0.1.1 docker-host