main.yaml

---
- name: Include CIS Stage Specific vars
  include_vars: cis-{{ cis_Stage }}.yaml

- name: Debian related Specification
  include_tasks: configure_Debian.yaml
  when:
    ansible_os_family == 'Debian'

- name: CentOS related Specification
  include_tasks: configure_RedHat.yaml
  when: ansible_os_family == 'RedHat' and ansible_distribution != 'Amazon'

- name: Amazon Linux 2 related Specification
  include_tasks: amazon_linux.yaml
  when: ansible_distribution == 'Amazon'

# - name: Special purpose services
#   include_tasks: services.yaml

# - name: Logging and monitoring
#   include_tasks: audit.yaml

# - name: Additional Process Hardening
#   include_tasks: pam_limit.yaml

# - name: Tcp Wrapper and System File Permissions
#   include_tasks: file_permissions.yaml

# - name: Filesystem Configuration
#   include_tasks: filesystem_configuration.yaml

# - name: Network Configuration Host
#   include_tasks: network_configuration_host.yaml

# - name: Ensure bogus ICMP responses are ignored
#   include_tasks: network_configuration_router.yaml

# - name: Ensure dccp and sctp is disabled
#   include_tasks: network_protocol_and_unusedFilesystem.yaml