T

trixie

Ansible baseline for Debian 13 hosts: users, packages, sysctl, auto-updates, and a single-owner nftables firewall apps extend

Ansible automation to deploy Nextcloud on Debian 13/Proxmox — rootless Podman + Quadlet app tier behind a rootful gVisor-sandboxed Caddy + Coraza WAF edge, mTLS between tiers

Ansible hardening for Debian 13 hosts: SSH, CrowdSec/fail2ban, auditd/AIDE, sysctl, and PAM 2FA-- lockout-safe, runs after ansible-base-debian