N

nftables

Foreman 3.19 + Katello 4.21 on AlmaLinux 9 via Ansible - content management (repo sync, content views, lifecycle envs), Proxmox-provisioned and hardened.

Ansible hardening for Enterprise Linux hosts: SSH/2FA, auditd, AIDE, CrowdSec, fail2ban, scanners, reporting, and rollback safety.

Ansible baseline for Enterprise Linux hosts: users, packages, dotfiles, sysctl, dnf-automatic, and nftables.

Ansible automation to deploy an apt-cacher-ng caching proxy in a Debian Proxmox LXC container.

Ansible baseline for Debian 13 hosts: users, packages, sysctl, auto-updates, and a single-owner nftables firewall apps extend

Hardened HAProxy 3.0 reverse-proxy edge for Debian 13 DMZ — ACME/Cloudflare DNS-01, Tailscale mgmt, nftables; adopts the acidnetworks base/hardening collections.

Ansible automation for a Samba Active Directory domain controller and domain-joined file/print server on Debian 13, with optional Proxmox VE provisioning.