---
# Parent-level defaults
cis_tag: cis_hardening
audit_rules_file: /etc/audit/rules.d/cis.rules
rsyslog_remote: "" # set to "logserver.example.com:514" to forward logs
txt_grub_args: "" # additional kernel args if needed, e.g. "audit=1"