Add reusable Debian and Ubuntu hardening playbooks

2026-09-29 00:07:10 +04:00
commit 3d08c8f1ff
17 changed files with 663 additions and 0 deletions
@@ -0,0 +1,25 @@
+# Ansible generated files
+*.retry
+*.vault-password
+
+# Inventory is local to each checkout. Track *.yml.example templates instead.
+/inventory/*.yml
+/inventory/**/*.yml
+
+# Local secrets and runtime state
+.env
+.env.*
+!*.env.example
+vault.yml
+vault.yaml
+**/vault.yml
+**/vault.yaml
+!inventory/group_vars/all/vault.yml.example
+secrets/
+data/
+letsencrypt/
+
+# Python tooling
+.venv/
+__pycache__/
+*.py[cod]