dotfiles/ansible/roles/security/tasks/defaults.yml

21 lines
459 B
YAML
Raw Normal View History

2025-12-27 15:29:27 -06:00
- name: Configure Security Auto Updates
shell:
cmd: dpkg-reconfigure -p medium unattended-upgrades
become: yes
when: ansible_facts["os_family"] == 'Debian'
- name: Check if UFW is installed
command: ufw version
register: ufw_version
ignore_errors: true
changed_when: false
- name: Configure UFW
shell:
cmd: |
ufw enable
ufw default deny incoming
ufw default allow outgoing
become: yes
when: ufw_version.rc == 0