From 24bbb07186a4830885ecdc6ccf808ffc2195bc9e Mon Sep 17 00:00:00 2001
From: Micke Nordin <kano@sunet.se>
Date: Mon, 28 Oct 2024 08:15:08 +0100
Subject: [PATCH] hardening

---
 global/overlay/etc/puppet/cosmos-rules.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 5ba1937..33a05e9 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -15,6 +15,8 @@
       - nrpe_check_zombie_procs
   sunet::server:
     install_scriptherder: true
+    unattended_upgrades: true
+    fail2ban: true
   streams:
   sunet::invent::client:
     export_endpoint: https://ni-frontend-test.sunet.se