Add sunet::server conf to cosmos-rules

2024-09-26 12:13:33 +02:00 · 2024-09-26 12:13:33 +02:00 · bfe476f046
commit bfe476f046
parent 1a7d465cf4
1 changed files with 6 additions and 0 deletions
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@ -1,6 +1,12 @@
 # Note that the matching is done with re.match()
 .*\.sunet\.se$:
   net:
+   sunet::server:
+      disable_all_local_users: true
+      disable_ipv6_privacy: true
+      fail2ban: true
+      install_scriptherder: true
+      unattended_upgrades: true

 '^ns[0-9]?.mnt.se$':
   nameserver: