Skip to content

ansible-role to install and setup auditd, fail2ban and snmp.

License

Notifications You must be signed in to change notification settings

MVladislav/ansible-security

Repository files navigation

Security

Ansible Lint Ansible Molecule Test


You can checkout MVladislav - ansible-env-setup - playbooks for how i use it in general.

Tested with:

  • Ubuntu 23.04

Role Variables

security_setup_services:
  auditd: true
  fail2ban: true
  snmp: false

security_auditd_add_custom_cron_compressor: false

security_fail2ban_proxmox: false

security_snmp_user: snmp
security_snmp_password: <PASSWORD>
security_snmp_encryption: <ENC>
security_snmp_location: home
security_snmp_contact: root
security_snmp_address_ipv4: "{{ omit }}"
security_snmp_address_ipv6: "{{ omit }}"
security_snmp_port_ipv4: 161
security_snmp_port_ipv6: "{{ omit }}"

Dependencies

Developed and testes with Ansible 2.14.4

Example Playbook

- hosts: servers
  roles:
    - role: security
      security_setup_services:
        auditd: true
        fail2ban: true
        snmp: false

      security_auditd_add_custom_cron_compressor: false

      security_fail2ban_proxmox: false

      security_snmp_user: snmp
      security_snmp_password: <PASSWORD>
      security_snmp_encryption: <ENC>
      security_snmp_location: home
      security_snmp_contact: root
      security_snmp_address_ipv4: "{{ omit }}"
      security_snmp_address_ipv6: "{{ omit }}"
      security_snmp_port_ipv4: 161
      security_snmp_port_ipv6: "{{ omit }}"

License

MIT