Skip to content

Commit

Permalink
Alphabetize module attributes
Browse files Browse the repository at this point in the history
  • Loading branch information
jsf9k committed Jun 11, 2024
1 parent 12bd3b8 commit 04feb71
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,19 +27,19 @@
# https://github.com/cisagov/ansible-role-hardening
- name: Log martian (impossible address) packets
ansible.builtin.lineinfile:
line: "{{ item.name }}={{ item.value }}"
path: /etc/ufw/sysctl.conf
regexp: "(?i)[^\\s #]*{{ item.name }}"
line: "{{ item.name }}={{ item.value }}"
state: present
loop:
- { name: "net/ipv4/conf/all/log_martians", value: "1"}
- { name: "net/ipv4/conf/default/log_martians", value: "1"}

- name: Enable TCP SYN cookies
ansible.builtin.lineinfile:
line: "net/ipv4/tcp_syncookies=1"
path: /etc/ufw/sysctl.conf
regexp: "(?i)[^\\s #]*net/ipv4/tcp_syncookies"
line: "net/ipv4/tcp_syncookies=1"
state: present

- name: Systemd daemon-reload
Expand Down

0 comments on commit 04feb71

Please sign in to comment.