https://github.com/mvladislav/ansible-security
ansible-role to install and setup auditd, fail2ban and snmp.
https://github.com/mvladislav/ansible-security
ansible-role auditd fail2ban linux snmp ubuntu
Last synced: about 2 months ago
JSON representation
ansible-role to install and setup auditd, fail2ban and snmp.
- Host: GitHub
- URL: https://github.com/mvladislav/ansible-security
- Owner: MVladislav
- License: mit
- Created: 2021-07-07T02:11:38.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2026-04-04T17:29:33.000Z (2 months ago)
- Last Synced: 2026-04-04T20:16:27.192Z (2 months ago)
- Topics: ansible-role, auditd, fail2ban, linux, snmp, ubuntu
- Language: Jinja
- Homepage:
- Size: 110 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# Security
[](https://github.com/MVladislav/ansible-security/actions/workflows/ansible-lint.yml)
[](https://github.com/MVladislav/ansible-security/actions/workflows/ci.yml)
- [Security](#security)
- [Role Variables](#role-variables)
- [Dependencies](#dependencies)
- [Example Playbook](#example-playbook)
- [License](#license)
---
You can checkout [MVladislav - ansible-env-setup - playbooks](https://github.com/MVladislav/ansible-env-setup/tree/main/playbooks) for how i use it in general.
Tested with:
- Ubuntu 23.04
- Ubuntu 24.04
- Ubuntu 25.04
## Role Variables
```yml
security_setup_services:
auditd: true
fail2ban: true
snmp: false
ssh: true
clients:
- name: "{{ ansible_user }}"
security_fail2ban_proxmox: false
security_snmp_user: snmp
security_snmp_password:
security_snmp_encryption:
security_snmp_location: home
security_snmp_contact: root
security_snmp_address_ipv4: "{{ omit }}"
security_snmp_address_ipv6: "{{ omit }}"
security_snmp_port_ipv4: 161
# security_snmp_port_ipv6: 161
```
## Dependencies
Developed and testes with Ansible 2.14.4
## Example Playbook
```yml
- hosts: servers
roles:
- role: security
ansible_user:
security_setup_services:
auditd: true
fail2ban: true
snmp: false
ssh: true
clients:
- name: "{{ ansible_user }}"
security_fail2ban_proxmox: false
security_snmp_user: snmp
security_snmp_password:
security_snmp_encryption:
security_snmp_location: home
security_snmp_contact: root
security_snmp_address_ipv4: "{{ omit }}"
security_snmp_address_ipv6: "{{ omit }}"
security_snmp_port_ipv4: 161
# security_snmp_port_ipv6: 161
```
## License
MIT