diff --git a/.github/workflows/molecule.yml b/.github/workflows/molecule.yml new file mode 100644 index 0000000..c284a96 --- /dev/null +++ b/.github/workflows/molecule.yml @@ -0,0 +1,35 @@ +name: Molecule CI + +on: + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + molecule: + runs-on: ubuntu-latest + strategy: + matrix: + role: + - secure_ubuntu + - podman_services + - identity + - file_storage + - monitoring + - preflight + steps: + - uses: actions/checkout@v4 + - name: Set up Python + uses: actions/setup-python@v4 + with: + python-version: 3.12 + - name: Install Ansible and Molecule + run: | + pip install ansible molecule molecule-plugins[docker] docker + - name: Test Molecule Scenario + run: | + cd collections/ansible_collections/kellengineering/open_cmmc_stack/roles/${{ matrix.role }} + molecule test diff --git a/.github/workflows/terraform-plan.yml b/.github/workflows/terraform-plan.yml new file mode 100644 index 0000000..2dc105a --- /dev/null +++ b/.github/workflows/terraform-plan.yml @@ -0,0 +1,32 @@ +name: Terraform Validation + +on: + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + terraform: + runs-on: ubuntu-latest + defaults: + run: + working-directory: terraform/envs/dev + + steps: + - uses: actions/checkout@v4 + - name: Setup Terraform + uses: hashicorp/setup-terraform@v2 + with: + terraform_version: 1.5.7 + + - name: Terraform Init + run: terraform init -backend-config=../../backend-config/dev.tfbackend + + - name: Terraform Validate + run: terraform validate + + - name: Terraform Plan + run: terraform plan -input=false diff --git a/ansible/roles/secure_ubuntu/meta/main.yml b/ansible/roles/secure_ubuntu/meta/main.yml deleted file mode 100644 index b44c379..0000000 --- a/ansible/roles/secure_ubuntu/meta/main.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -galaxy_info: - role_name: secure_ubuntu - author: open-cmmc - description: Harden Ubuntu system for CMMC Level 2 - license: MIT - min_ansible_version: "2.10" - -dependencies: [] diff --git a/collections/ansible_collections/kellengineering/open_cmmc_stack/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/README.md new file mode 100644 index 0000000..51ecb9f --- /dev/null +++ b/collections/ansible_collections/kellengineering/open_cmmc_stack/README.md @@ -0,0 +1,2 @@ +# OpenCMMC Stack Collection +Ansible collection containing roles for secure, auditable deployment of the OpenCMMC Stack. diff --git a/collections/ansible_collections/kellengineering/open_cmmc_stack/galaxy.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/galaxy.yml new file mode 100644 index 0000000..10f3c5e --- /dev/null +++ b/collections/ansible_collections/kellengineering/open_cmmc_stack/galaxy.yml @@ -0,0 +1,11 @@ +namespace: kellengineering +name: open_cmmc_stack +version: 1.0.0 +readme: README.md +authors: + - Mike Kell +description: Collection for OpenCMMC Stack +license: MIT +repository: https://github.com/mtkell/open-cmmc-stack + +build_ignore: [] diff --git a/ansible/roles/evidence_logger/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/evidence_logger/tasks/main.yml similarity index 100% rename from ansible/roles/evidence_logger/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/evidence_logger/tasks/main.yml diff --git a/ansible/roles/file_storage/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/README.md similarity index 100% rename from ansible/roles/file_storage/README.md rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/README.md diff --git a/ansible/roles/file_storage/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/defaults/main.yml similarity index 100% rename from ansible/roles/file_storage/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/defaults/main.yml diff --git a/ansible/roles/file_storage/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/handlers/main.yml similarity index 100% rename from ansible/roles/file_storage/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/handlers/main.yml diff --git a/ansible/roles/file_storage/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/meta/main.yml similarity index 100% rename from ansible/roles/file_storage/meta/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/meta/main.yml diff --git a/ansible/roles/file_storage/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/tasks/main.yml similarity index 100% rename from ansible/roles/file_storage/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/file_storage/tasks/main.yml diff --git a/ansible/roles/identity/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/README.md similarity index 100% rename from ansible/roles/identity/README.md rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/README.md diff --git a/ansible/roles/identity/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/defaults/main.yml similarity index 100% rename from ansible/roles/identity/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/defaults/main.yml diff --git a/ansible/roles/identity/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/handlers/main.yml similarity index 100% rename from ansible/roles/identity/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/handlers/main.yml diff --git a/ansible/roles/identity/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/meta/main.yml similarity index 100% rename from ansible/roles/identity/meta/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/meta/main.yml diff --git a/ansible/roles/identity/tasks/configure.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/configure.yml similarity index 100% rename from ansible/roles/identity/tasks/configure.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/configure.yml diff --git a/ansible/roles/identity/tasks/configure_realm.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/configure_realm.yml similarity index 100% rename from ansible/roles/identity/tasks/configure_realm.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/configure_realm.yml diff --git a/ansible/roles/identity/tasks/deploy.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/deploy.yml similarity index 100% rename from ansible/roles/identity/tasks/deploy.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/deploy.yml diff --git a/ansible/roles/identity/tasks/enroll_clients.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/enroll_clients.yml similarity index 100% rename from ansible/roles/identity/tasks/enroll_clients.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/enroll_clients.yml diff --git a/ansible/roles/identity/tasks/entra_federation.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/entra_federation.yml similarity index 100% rename from ansible/roles/identity/tasks/entra_federation.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/entra_federation.yml diff --git a/ansible/roles/identity/tasks/generate_ca_certs.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/generate_ca_certs.yml similarity index 100% rename from ansible/roles/identity/tasks/generate_ca_certs.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/generate_ca_certs.yml diff --git a/ansible/roles/identity/tasks/install_keycloak.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/install_keycloak.yml similarity index 100% rename from ansible/roles/identity/tasks/install_keycloak.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/install_keycloak.yml diff --git a/ansible/roles/identity/tasks/integrate_sso.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/integrate_sso.yml similarity index 100% rename from ansible/roles/identity/tasks/integrate_sso.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/integrate_sso.yml diff --git a/ansible/roles/identity/tasks/ldap_federation.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/ldap_federation.yml similarity index 100% rename from ansible/roles/identity/tasks/ldap_federation.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/ldap_federation.yml diff --git a/ansible/roles/identity/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/main.yml similarity index 100% rename from ansible/roles/identity/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/main.yml diff --git a/ansible/roles/identity/tasks/provision_step_ca.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/provision_step_ca.yml similarity index 100% rename from ansible/roles/identity/tasks/provision_step_ca.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/provision_step_ca.yml diff --git a/ansible/roles/identity/tasks/setup_mfa.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/setup_mfa.yml similarity index 100% rename from ansible/roles/identity/tasks/setup_mfa.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/setup_mfa.yml diff --git a/ansible/roles/identity/tasks/tailscale.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/tailscale.yml similarity index 100% rename from ansible/roles/identity/tasks/tailscale.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/tasks/tailscale.yml diff --git a/ansible/roles/identity/templates/keycloak.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/keycloak.service.j2 similarity index 100% rename from ansible/roles/identity/templates/keycloak.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/keycloak.service.j2 diff --git a/ansible/roles/identity/templates/step-ca-config.json.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/step-ca-config.json.j2 similarity index 100% rename from ansible/roles/identity/templates/step-ca-config.json.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/step-ca-config.json.j2 diff --git a/ansible/roles/identity/templates/step-ca-provisioner-password.txt.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/step-ca-provisioner-password.txt.j2 similarity index 100% rename from ansible/roles/identity/templates/step-ca-provisioner-password.txt.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/step-ca-provisioner-password.txt.j2 diff --git a/ansible/roles/identity/templates/systemd-step-ca.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/systemd-step-ca.service.j2 similarity index 100% rename from ansible/roles/identity/templates/systemd-step-ca.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/templates/systemd-step-ca.service.j2 diff --git a/ansible/roles/identity/vars/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/vars/main.yml similarity index 100% rename from ansible/roles/identity/vars/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/identity/vars/main.yml diff --git a/ansible/roles/monitoring/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/defaults/main.yml similarity index 100% rename from ansible/roles/monitoring/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/defaults/main.yml diff --git a/ansible/roles/monitoring/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/handlers/main.yml similarity index 100% rename from ansible/roles/monitoring/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/handlers/main.yml diff --git a/ansible/roles/monitoring/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/meta/main.yml similarity index 100% rename from ansible/roles/monitoring/meta/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/meta/main.yml diff --git a/ansible/roles/monitoring/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/tasks/main.yml similarity index 100% rename from ansible/roles/monitoring/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/monitoring/tasks/main.yml diff --git a/ansible/roles/podman_services/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/README.md similarity index 100% rename from ansible/roles/podman_services/README.md rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/README.md diff --git a/ansible/roles/podman_services/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/defaults/main.yml similarity index 100% rename from ansible/roles/podman_services/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/defaults/main.yml diff --git a/ansible/roles/podman_services/files/mailcow/.env.eample b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/files/mailcow/.env.eample similarity index 100% rename from ansible/roles/podman_services/files/mailcow/.env.eample rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/files/mailcow/.env.eample diff --git a/ansible/roles/podman_services/files/mailcow/podman_compose.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/files/mailcow/podman_compose.yml similarity index 100% rename from ansible/roles/podman_services/files/mailcow/podman_compose.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/files/mailcow/podman_compose.yml diff --git a/ansible/roles/podman_services/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/handlers/main.yml similarity index 100% rename from ansible/roles/podman_services/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/handlers/main.yml diff --git a/ansible/roles/podman_services/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/meta/main.yml similarity index 100% rename from ansible/roles/podman_services/meta/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/meta/main.yml diff --git a/ansible/roles/podman_services/tasks/keycloak.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/keycloak.yml similarity index 100% rename from ansible/roles/podman_services/tasks/keycloak.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/keycloak.yml diff --git a/ansible/roles/podman_services/tasks/mailcow.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/mailcow.yml similarity index 100% rename from ansible/roles/podman_services/tasks/mailcow.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/mailcow.yml diff --git a/ansible/roles/podman_services/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/main.yml similarity index 100% rename from ansible/roles/podman_services/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/main.yml diff --git a/ansible/roles/podman_services/tasks/run_service.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/run_service.yml similarity index 100% rename from ansible/roles/podman_services/tasks/run_service.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/run_service.yml diff --git a/ansible/roles/podman_services/tasks/step_ca.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/step_ca.yml similarity index 100% rename from ansible/roles/podman_services/tasks/step_ca.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/step_ca.yml diff --git a/ansible/roles/podman_services/tasks/wazuh.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/wazuh.yml similarity index 100% rename from ansible/roles/podman_services/tasks/wazuh.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/tasks/wazuh.yml diff --git a/ansible/roles/podman_services/templates/keycloak.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/keycloak.service.j2 similarity index 100% rename from ansible/roles/podman_services/templates/keycloak.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/keycloak.service.j2 diff --git a/ansible/roles/podman_services/templates/mailcow/env.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/env.j2 similarity index 100% rename from ansible/roles/podman_services/templates/mailcow/env.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/env.j2 diff --git a/ansible/roles/podman_services/templates/mailcow/mailcow.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/mailcow.service.j2 similarity index 100% rename from ansible/roles/podman_services/templates/mailcow/mailcow.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/mailcow.service.j2 diff --git a/ansible/roles/podman_services/templates/mailcow/podman-compose.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/podman-compose.yml similarity index 100% rename from ansible/roles/podman_services/templates/mailcow/podman-compose.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/mailcow/podman-compose.yml diff --git a/ansible/roles/podman_services/templates/step-ca/.env.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/.env.j2 similarity index 100% rename from ansible/roles/podman_services/templates/step-ca/.env.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/.env.j2 diff --git a/ansible/roles/podman_services/templates/step-ca/podman-compose.yml.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/podman-compose.yml.j2 similarity index 100% rename from ansible/roles/podman_services/templates/step-ca/podman-compose.yml.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/podman-compose.yml.j2 diff --git a/ansible/roles/podman_services/templates/step-ca/step-ca.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/step-ca.service.j2 similarity index 100% rename from ansible/roles/podman_services/templates/step-ca/step-ca.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/step-ca/step-ca.service.j2 diff --git a/ansible/roles/podman_services/templates/wazuh.yml/.env.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/.env.j2 similarity index 100% rename from ansible/roles/podman_services/templates/wazuh.yml/.env.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/.env.j2 diff --git a/ansible/roles/podman_services/templates/wazuh.yml/podman-compose.yml.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/podman-compose.yml.j2 similarity index 100% rename from ansible/roles/podman_services/templates/wazuh.yml/podman-compose.yml.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/podman-compose.yml.j2 diff --git a/ansible/roles/podman_services/templates/wazuh.yml/wazuh.service.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/wazuh.service.j2 similarity index 100% rename from ansible/roles/podman_services/templates/wazuh.yml/wazuh.service.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/podman_services/templates/wazuh.yml/wazuh.service.j2 diff --git a/ansible/roles/preflight/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/README.md similarity index 100% rename from ansible/roles/preflight/README.md rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/README.md diff --git a/ansible/roles/preflight/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/defaults/main.yml similarity index 100% rename from ansible/roles/preflight/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/defaults/main.yml diff --git a/ansible/roles/preflight/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/handlers/main.yml similarity index 100% rename from ansible/roles/preflight/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/handlers/main.yml diff --git a/ansible/roles/preflight/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/meta/main.yml similarity index 100% rename from ansible/roles/preflight/meta/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/meta/main.yml diff --git a/ansible/roles/preflight/tasks/log_results.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/log_results.yml similarity index 100% rename from ansible/roles/preflight/tasks/log_results.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/log_results.yml diff --git a/ansible/roles/preflight/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/main.yml similarity index 100% rename from ansible/roles/preflight/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/main.yml diff --git a/ansible/roles/preflight/tasks/stepca.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/stepca.yml similarity index 100% rename from ansible/roles/preflight/tasks/stepca.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/stepca.yml diff --git a/ansible/roles/preflight/tasks/validate_vars.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/validate_vars.yml similarity index 100% rename from ansible/roles/preflight/tasks/validate_vars.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/tasks/validate_vars.yml diff --git a/ansible/roles/preflight/templates/summary.md.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/templates/summary.md.j2 similarity index 100% rename from ansible/roles/preflight/templates/summary.md.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/preflight/templates/summary.md.j2 diff --git a/ansible/roles/secure_ubuntu/README.md b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/README.md similarity index 100% rename from ansible/roles/secure_ubuntu/README.md rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/README.md diff --git a/ansible/roles/secure_ubuntu/defaults/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/defaults/main.yml similarity index 100% rename from ansible/roles/secure_ubuntu/defaults/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/defaults/main.yml diff --git a/ansible/roles/secure_ubuntu/handlers/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/handlers/main.yml similarity index 100% rename from ansible/roles/secure_ubuntu/handlers/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/handlers/main.yml diff --git a/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/meta/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/meta/main.yml new file mode 100644 index 0000000..edec16e --- /dev/null +++ b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/meta/main.yml @@ -0,0 +1,12 @@ +--- +galaxy_info: + role_name: secure_ubuntu + author: Mike Kell + description: Hardens Ubuntu to meet CMMC Level 2 minimums + license: MIT + min_ansible_version: "2.12" + platforms: + - name: Ubuntu + versions: + - 20.04 + - 22.04 diff --git a/ansible/roles/secure_ubuntu/tasks/audit.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/audit.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/audit.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/audit.yml diff --git a/ansible/roles/secure_ubuntu/tasks/banners.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/banners.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/banners.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/banners.yml diff --git a/ansible/roles/secure_ubuntu/tasks/firewall.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/firewall.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/firewall.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/firewall.yml diff --git a/ansible/roles/secure_ubuntu/tasks/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/main.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/main.yml diff --git a/ansible/roles/secure_ubuntu/tasks/motd.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/motd.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/motd.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/motd.yml diff --git a/ansible/roles/secure_ubuntu/tasks/password_policy.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/password_policy.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/password_policy.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/password_policy.yml diff --git a/ansible/roles/secure_ubuntu/tasks/ssh.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/ssh.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/ssh.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/ssh.yml diff --git a/ansible/roles/secure_ubuntu/tasks/updates.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/updates.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/updates.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/updates.yml diff --git a/ansible/roles/secure_ubuntu/tasks/user.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/user.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tasks/user.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tasks/user.yml diff --git a/ansible/roles/secure_ubuntu/templates/banner.txt.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/templates/banner.txt.j2 similarity index 100% rename from ansible/roles/secure_ubuntu/templates/banner.txt.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/templates/banner.txt.j2 diff --git a/ansible/roles/secure_ubuntu/templates/motd.txt.j2 b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/templates/motd.txt.j2 similarity index 100% rename from ansible/roles/secure_ubuntu/templates/motd.txt.j2 rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/templates/motd.txt.j2 diff --git a/ansible/roles/secure_ubuntu/tests/test.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tests/test.yml similarity index 100% rename from ansible/roles/secure_ubuntu/tests/test.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/tests/test.yml diff --git a/ansible/roles/secure_ubuntu/vars/main.yml b/collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/vars/main.yml similarity index 100% rename from ansible/roles/secure_ubuntu/vars/main.yml rename to collections/ansible_collections/kellengineering/open_cmmc_stack/roles/secure_ubuntu/vars/main.yml diff --git a/terraform/backend-config/dev.tfbackend b/terraform/backend-config/dev.tfbackend new file mode 100644 index 0000000..e69de29 diff --git a/terraform/backend-config/prod.tfbackend b/terraform/backend-config/prod.tfbackend new file mode 100644 index 0000000..e69de29 diff --git a/terraform/backend-config/staging.tfbackend b/terraform/backend-config/staging.tfbackend new file mode 100644 index 0000000..e69de29