Skip to content

ansible / common-playbook

Go to a project
Commit e1be87dd by ansible
Options

edit syntax

1 parent 75a6cc4e
Inline Side-by-side
Showing with 5 additions and 5 deletions
hardening.yml
......@@ -2,7 +2,7 @@
- hosts: new-host
become: true
tasks:
- name: Hardening Ubuntu OS: Disable IPv6
- name: Hardening Ubuntu OS Disable IPv6
sysctl:
name: "{{ item.parameter }}"
state: present
......@@ -12,7 +12,7 @@
- { parameter: net.ipv6.conf.default.disable_ipv6, value: 1 }
- { parameter: net.ipv6.conf.lo.disable_ipv6, value: 1 }
- name: Hardening Ubuntu OS: IP Spoofing protection
- name: Hardening Ubuntu OS IP Spoofing protection
sysctl:
name: "{{ item.parameter }}"
state: present
......@@ -21,7 +21,7 @@
- { parameter: net.ipv4.conf.all.rp_filter, value: 1 }
- { parameter: net.ipv4.conf.default.rp_filter, value: 1 }
- name: Hardening Ubuntu OS: Block SYN attacks
- name: Hardening Ubuntu OS Block SYN attacks
sysctl:
name: "{{ item.parameter }}"
state: present
......@@ -32,7 +32,7 @@
- { parameter: net.ipv4.tcp_synack_retries, value: 2 }
- { parameter: net.ipv4.tcp_syn_retries, value: 5 }
- name: Hardening Ubuntu OS: Ignore send redirects
- name: Hardening Ubuntu OS Ignore send redirects
sysctl:
name: "{{ item.parameter }}"
state: present
......@@ -41,7 +41,7 @@
- { parameter: net.ipv4.conf.all.send_redirects, value: 0 }
- { parameter: net.ipv4.conf.default.send_redirects, value: 0 }
- name: Hardening Ubuntu OS: Log Martians
- name: Hardening Ubuntu OS Log Martians
sysctl:
name: "{{ item.parameter }}"
state: present
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!