commit f1c61f61fdfca074d1ef1783fdf32e4e2dc32e95
Author: Rottler Tamas <tom@bitfit.hu>
Date:   Sun Apr 27 11:35:51 2025 +0200

    first commit

diff --git a/tasks/debian.yml b/tasks/debian.yml
new file mode 100644
index 0000000..90f94c1
--- /dev/null
+++ b/tasks/debian.yml
@@ -0,0 +1,4 @@
+---
+# empty.
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab:
diff --git a/tasks/main.yml b/tasks/main.yml
new file mode 100644
index 0000000..fc2eca6
--- /dev/null
+++ b/tasks/main.yml
@@ -0,0 +1,33 @@
+---
+- name: include debian/ubuntu specific
+  include_tasks: debian.yml
+  when: (ansible_distribution == "Debian" or ansible_distribution == "Ubuntu")
+
+- name: include redhat specific
+  include_tasks: redhat.yml
+  when: ansible_distribution == "RedHat"
+
+
+- name: security.conf ServerTokens, debian11-99 ubuntu20-99 redhat
+  lineinfile:
+    dest: /etc/apache2/conf-available/security.conf
+    regexp: "^ServerTokens"
+    line: "ServerTokens Prod"
+  when: 
+    - (ansible_distribution == "Debian" and ansible_distribution_major_version|int() >= 11) or
+      (ansible_distribution == "Ubuntu" and ansible_distribution_major_version|int() >= 20) or
+      ansible_distribution == "RedHat"
+
+
+- name: security.conf ServerSignature, debian11-99 ubuntu20-99 redhat
+  lineinfile:
+    dest: /etc/apache2/conf-available/security.conf
+    regexp: "^ServerSignature"
+    line: "ServerSignature Off"
+  when: 
+    - (ansible_distribution == "Debian" and ansible_distribution_major_version|int() >= 11) or
+      (ansible_distribution == "Ubuntu" and ansible_distribution_major_version|int() >= 20) or
+      ansible_distribution == "RedHat"
+
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab:
diff --git a/tasks/redhat.yml b/tasks/redhat.yml
new file mode 100644
index 0000000..90f94c1
--- /dev/null
+++ b/tasks/redhat.yml
@@ -0,0 +1,4 @@
+---
+# empty.
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab: