new files from source

Infrastrucutre as Code/Ansible/roles_metadata.yml

@@ -0,0 +1,123 @@
+roles_metadata:
+  # Bootstrap roles
+  base_users:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Base user creation tasks"
+
+  disk_resize:
+    initialization: true
+    provisioning: false
+    compliance: true
+    description: "Disk resizing tasks"
+
+  docker_gitlab_setup:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Docker runtime files moving and homelab repo copy"
+
+  endlessh:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Endlessh setup"
+
+  firewall_ssh:
+    initialization: true
+    provisioning: false
+    compliance: true
+    description: "Firewall and SSH configuration"
+
+  hostname_network:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Set hostname and networking"
+
+  packages:
+    initialization: true
+    provisioning: false
+    compliance: true
+    description: "base packages and update tasks"
+
+  portainer_agent:
+    initialization: true
+    provisioning: false
+    compliance: true
+    description: "Portainer agent setup"
+
+  root_password:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Root password setup"
+
+  zsh_custom:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "Custom Zsh setup"
+
+  # CIS Hardening roles
+  banners:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "Login banners setup"
+
+  file_permissions:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "File permissions hardening"
+
+  filesystem_hardening:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "filesystems hardening"
+
+  kernel_hardening:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "Kernel hardening tasks"
+
+  password_policy:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "Password policy enforcement"
+
+  service_disable:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "Disable unnecessary services"
+
+  ssh_hardening:
+    initialization: false
+    provisioning: false
+    compliance: true
+    description: "SSH hardening"
+
+  # SecureVault roles
+  haproxy:
+    initialization: false
+    provisioning: true
+    compliance: true
+    description: "haproxy deployment"
+
+  vault_agent:
+    initialization: true
+    provisioning: false
+    compliance: false
+    description: "vault_agent deployment"
+
+  technitium:
+    initialization: false
+    provisioning: true
+    compliance: false
+    description: "technitium deployment"