railiance-cluster/ansible/harden.yml

17 lines
655 B
YAML
Raw Normal View History

---
# SUPERSEDED — do not use for new work.
#
# OS security hardening (SSH, UFW, fail2ban, HISTCONTROL) is now owned by
# the railiance-hosts repository:
#
# railiance-hosts/ansible/roles/base/
# railiance-hosts/spec/server-baseline.yaml ← authoritative spec
# railiance-hosts/goss/baseline.yaml ← automated assertions
#
# Run `make converge` in railiance-hosts before deploying anything from
# this repo. See ADR-002 for the full boundary definition:
# railiance-hosts/docs/adr/ADR-002-repo-boundary-hosts-vs-bootstrap.md
#
# This file is retained to avoid breaking git history references.
# It must not be imported or executed.