feat(aegis): manage firewall and SSH hardening

2026-09-28 11:13:48 +00:00 · 2026-09-05 13:30:25 +02:00
parent 46ae536570
commit 1933ddbe8f
9 changed files with 203 additions and 18 deletions
--- a/ansible/roles/profile_aegis/defaults/main.yml
+++ b/ansible/roles/profile_aegis/defaults/main.yml
@@ -7,3 +7,9 @@ aegis_icloudpd_synchronisation_interval: 86400
 aegis_icloudpd_apple_id: ""
 aegis_ikaros_mac_address: aa:bb:cc:dd:ee:ff
 aegis_wol_port: 9
+
+aegis_lan_subnet: CHANGEME_LAN_SUBNET
+aegis_firewalld_zone: public
+aegis_adguard_web_port: 3000
+aegis_ssh_allowed_users:
+  - pi