42 lines
1.0 KiB
YAML
42 lines
1.0 KiB
YAML
---
|
|
- name: system setup | package hardening | remove unnecessary packages (Debian family)
|
|
tags: packages,hardening,system
|
|
package:
|
|
name:
|
|
# Daemons not needed on a bastion host
|
|
- apache2*
|
|
- nginx*
|
|
- lighttpd*
|
|
- samba*
|
|
- nfs-kernel-server
|
|
- bind9
|
|
- postfix
|
|
- cups*
|
|
- avahi-daemon
|
|
# Common utilities not required for a minimal system
|
|
- popularity-contest
|
|
- whoopsie
|
|
- command-not-found
|
|
# Games and fun stuff
|
|
- bsdgames
|
|
- fortune-mod
|
|
state: absent
|
|
purge: true # Also removes configuration files
|
|
notify: update aide database
|
|
when: ansible_os_family == "Debian"
|
|
|
|
- name: system setup | package hardening | remove unnecessary packages (RedHat family)
|
|
tags: packages,hardening,system
|
|
package:
|
|
name:
|
|
- httpd*
|
|
- nginx*
|
|
- samba*
|
|
- nfs-utils
|
|
- named
|
|
- postfix
|
|
- cups*
|
|
- avahi
|
|
state: absent
|
|
notify: update aide database
|
|
when: ansible_os_family == "RedHat" |