deleted cruft
This commit is contained in:
@@ -2,12 +2,10 @@
|
|||||||
- name: Set default firewalld zone to home
|
- name: Set default firewalld zone to home
|
||||||
command:
|
command:
|
||||||
cmd: firewall-cmd --set-default-zone=home
|
cmd: firewall-cmd --set-default-zone=home
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Change interface to home zone
|
- name: Change interface to home zone
|
||||||
command:
|
command:
|
||||||
cmd: firewall-cmd --zone=home --change-interface={{ network_interface }}
|
cmd: firewall-cmd --zone=home --change-interface={{ network_interface }}
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Add allowed services to home zone
|
- name: Add allowed services to home zone
|
||||||
firewalld:
|
firewalld:
|
||||||
@@ -16,18 +14,15 @@
|
|||||||
permanent: yes
|
permanent: yes
|
||||||
state: enabled
|
state: enabled
|
||||||
loop: "{{ allowed_services }}"
|
loop: "{{ allowed_services }}"
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Enable logging for denied packets
|
- name: Enable logging for denied packets
|
||||||
command:
|
command:
|
||||||
cmd: firewall-cmd --set-log-denied=all
|
cmd: firewall-cmd --set-log-denied=all
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Reload firewalld
|
- name: Reload firewalld
|
||||||
systemd:
|
systemd:
|
||||||
name: firewalld
|
name: firewalld
|
||||||
state: reloaded
|
state: reloaded
|
||||||
become: true
|
|
||||||
|
|
||||||
- name: Ensure SELinux is enabled and in enforcing mode
|
- name: Ensure SELinux is enabled and in enforcing mode
|
||||||
selinux:
|
selinux:
|
||||||
|
|||||||
@@ -1,14 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=ClamAV Virus Database Update
|
|
||||||
Documentation=man:freshclam(1) man:freshclam.conf(5)
|
|
||||||
After=network.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/bin/freshclam
|
|
||||||
StandardOutput=syslog
|
|
||||||
StandardError=syslog
|
|
||||||
SyslogIdentifier=freshclam
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=Run freshclam periodically
|
|
||||||
|
|
||||||
[Timer]
|
|
||||||
OnCalendar=hourly
|
|
||||||
Persistent=true
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=timers.target
|
|
||||||
|
|
||||||
@@ -1,20 +0,0 @@
|
|||||||
# Automatically Generated by Ansible
|
|
||||||
LocalSocket /var/run/clamd.scan/clamd.sock
|
|
||||||
FixStaleSocket true
|
|
||||||
User clamscan
|
|
||||||
AllowSupplementaryGroups true
|
|
||||||
ScanMail true
|
|
||||||
ScanArchive true
|
|
||||||
ArchiveBlockEncrypted false
|
|
||||||
MaxDirectoryRecursion 15
|
|
||||||
FollowDirectorySymlinks false
|
|
||||||
FollowFileSymlinks false
|
|
||||||
ReadTimeout 180
|
|
||||||
MaxThreads 12
|
|
||||||
LogFile /var/log/clamd.scan
|
|
||||||
LogTime true
|
|
||||||
LogSyslog false
|
|
||||||
PidFile /var/run/clamd.scan/clamd.pid
|
|
||||||
DatabaseDirectory /var/lib/clamav
|
|
||||||
OfficialDatabaseOnly false
|
|
||||||
|
|
||||||
Reference in New Issue
Block a user