ansible(base): import aide tasks from main.yml
- SHA
54853fe4956a0c538d60694d0545e2ef915b9d02- Parents
-
7df3e7a - Tree
fd2a6ff
54853fe
54853fe4956a0c538d60694d0545e2ef915b9d027df3e7a
fd2a6ff| Status | File | + | - |
|---|---|---|---|
| M |
deploy/ansible/roles/base/tasks/main.yml
|
5 | 0 |
deploy/ansible/roles/base/tasks/main.ymlmodified@@ -115,3 +115,8 @@ | ||
| 115 | 115 | backend = auto |
| 116 | 116 | mode: "0644" |
| 117 | 117 | notify: restart fail2ban |
| 118 | + | |
| 119 | +# AIDE file-integrity monitoring lives in its own task file so the | |
| 120 | +# nightly-check + baseline-init noise doesn't clutter the main flow. | |
| 121 | +- name: AIDE file-integrity monitoring | |
| 122 | + import_tasks: aide.yml | |