n0mad1k/CoM-ghost_protocol
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Split base hardening packages into required and optional

Browse Source 
software-properties-common removed — dropped from Debian 13 (trixie).
unattended-upgrades and apt-listchanges moved to optional task with
ignore_errors so missing packages don't fail the entire deployment.
This commit is contained in:
n0mad1k
2026-03-10 10:59:06 -04:00
parent 34a3961926
commit 040fa12705
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
phantom/playbooks/common/base_hardening.yml
+9 -3
View File
@@ -27,16 +27,22 @@
name: name:
- ufw - ufw
- fail2ban - fail2ban
- unattended-upgrades
- apt-listchanges
- curl - curl
- wget - wget
- gnupg - gnupg
- ca-certificates - ca-certificates
- software-properties-common
state: present state: present
when: ansible_os_family == "Debian" when: ansible_os_family == "Debian"
- name: Install optional hardening packages
apt:
name:
- unattended-upgrades
- apt-listchanges
state: present
when: ansible_os_family == "Debian"
ignore_errors: true
# ─── UFW Firewall ─────────────────────────────────────────────────── # ─── UFW Firewall ───────────────────────────────────────────────────
- name: Set UFW default deny incoming - name: Set UFW default deny incoming
ufw: ufw: