Add reusable Debian and Ubuntu hardening playbooks

2026-09-29 00:07:10 +04:00
commit 3d08c8f1ff
17 changed files with 663 additions and 0 deletions
@@ -0,0 +1,4 @@
+---
+# Copy to vault.yml, replace this value with the output of `openssl passwd -6`,
+# then encrypt vault.yml with `ansible-vault encrypt inventory/group_vars/all/vault.yml`.
+vault_admin_user_password_hash: "$6$REPLACE_WITH_A_REAL_SHA512_CRYPT_HASH"