initial commit

2026-08-19 09:51:43 +02:00
commit d777c1e975
79 changed files with 2263 additions and 0 deletions
--- a/inventories/production/group_vars/dmz.yml
+++ b/inventories/production/group_vars/dmz.yml
@@ -0,0 +1,12 @@
+---
+# Overrides for the "dmz" group (see hosts.ini).
+
+cis_level: 2
+
+firewall_allowed_services:
+  - service: "https"
+    source: "any"
+  - service: "ssh"
+    source: "{{ firewall_admin_subnet }}"
+
+firewall_default_zone: "drop"