Add reusable Debian and Ubuntu hardening playbooks

2026-09-29 00:07:10 +04:00
commit 3d08c8f1ff
17 changed files with 663 additions and 0 deletions
@@ -0,0 +1,12 @@
+---
+# Rename this file to match the host alias in hosts.yml.
+admin_user_authorized_keys:
+  - "ssh-ed25519 REPLACE_WITH_YOUR_PUBLIC_KEY admin@laptop"
+
+# Add only inbound ports required by this host's services. SSH is managed by
+# ssh_port and ssh_keep_legacy_port, so do not duplicate it here.
+ufw_allowed_rules: []
+
+# To retire an existing UFW rule, list it here for one deployment, then remove
+# it from this cleanup list.
+ufw_remove_rules: []