NetguruGist

  tasks:

    - name: remove admin account

      user: name=admin state=absent remove=true

NetguruGist

(...)

PLAY RECAP **************************************************************

<IP>          : ok=3    changed=0    unreachable=0    failed=0

NetguruGist

ansible-playbook -i inventory playbook.yml

NetguruGist

    - name: “update ssh-key to admin user”

      authorized_key: user=admin key="SSH_KEY" exclusive=yes

NetguruGist

  tasks:

    - name: create admin account

      user: name=admin shell=/bin/bash

NetguruGist

- name: Basic server security

  hosts: linux

  become: true

NetguruGist

ansible linux -i inventory -m setup

NetguruGist

IP_ADDRESS  ansible_ssh_user=ubuntu

NetguruGist

    - apt: name=logwatch state=present

    - cron: name="send logwatch logs" minute="0" hour="0" job="/usr/sbin/logwatch --output mail --mailto [email protected] --detail high" state=present

NetguruGist

    - apt: name=fail2ban state=present