mateusz/portfolio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update docs for Ansible hardening roles

Browse Source
This commit is contained in:
Mateusz Suski
2026-05-06 09:25:43 +00:00
parent 02a51f72f9
commit deb12a0b4f
7 changed files with 76 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infra-run/ansible/inventory/README.md
+9 -2
View File
@@ -16,8 +16,15 @@ flowchart TD
- `group_vars` - variables applied at group or environment level.
- `host_vars` - variables tailored to individual nodes.
- `hosts.yml` - sanitized example groups for Linux and AIX hardening targets.
## Current Inventory Shape
- `linux` - local example host for Linux hardening playbooks.
- `aix` - empty sanitized group ready for AIX host definitions.
- `group_vars/all.yml` - shared hardening defaults such as NTP servers, SSH behavior, audit/logging toggles, sysctl hardening, and optional mount management.
## Notes
- The structure is present even though the repository currently keeps this area sanitized and mostly empty.
- This is the natural companion to future playbooks and roles under `infra-run/ansible`.
- Inventory values are intentionally sanitized.
- Override defaults per host, per group, or per run before applying any hardening playbook.