From f1c61f61fdfca074d1ef1783fdf32e4e2dc32e95 Mon Sep 17 00:00:00 2001
From: Rottler Tamas <tom@bitfit.hu>
Date: Sun, 27 Apr 2025 11:35:51 +0200
Subject: [PATCH] first commit

---
 tasks/debian.yml |  4 ++++
 tasks/main.yml   | 33 +++++++++++++++++++++++++++++++++
 tasks/redhat.yml |  4 ++++
 3 files changed, 41 insertions(+)
 create mode 100644 tasks/debian.yml
 create mode 100644 tasks/main.yml
 create mode 100644 tasks/redhat.yml

diff --git a/tasks/debian.yml b/tasks/debian.yml
new file mode 100644
index 0000000..90f94c1
--- /dev/null
+++ b/tasks/debian.yml
@@ -0,0 +1,4 @@
+---
+# empty.
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab:
diff --git a/tasks/main.yml b/tasks/main.yml
new file mode 100644
index 0000000..fc2eca6
--- /dev/null
+++ b/tasks/main.yml
@@ -0,0 +1,33 @@
+---
+- name: include debian/ubuntu specific
+  include_tasks: debian.yml
+  when: (ansible_distribution == "Debian" or ansible_distribution == "Ubuntu")
+
+- name: include redhat specific
+  include_tasks: redhat.yml
+  when: ansible_distribution == "RedHat"
+
+
+- name: security.conf ServerTokens, debian11-99 ubuntu20-99 redhat
+  lineinfile:
+    dest: /etc/apache2/conf-available/security.conf
+    regexp: "^ServerTokens"
+    line: "ServerTokens Prod"
+  when: 
+    - (ansible_distribution == "Debian" and ansible_distribution_major_version|int() >= 11) or
+      (ansible_distribution == "Ubuntu" and ansible_distribution_major_version|int() >= 20) or
+      ansible_distribution == "RedHat"
+
+
+- name: security.conf ServerSignature, debian11-99 ubuntu20-99 redhat
+  lineinfile:
+    dest: /etc/apache2/conf-available/security.conf
+    regexp: "^ServerSignature"
+    line: "ServerSignature Off"
+  when: 
+    - (ansible_distribution == "Debian" and ansible_distribution_major_version|int() >= 11) or
+      (ansible_distribution == "Ubuntu" and ansible_distribution_major_version|int() >= 20) or
+      ansible_distribution == "RedHat"
+
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab:
diff --git a/tasks/redhat.yml b/tasks/redhat.yml
new file mode 100644
index 0000000..90f94c1
--- /dev/null
+++ b/tasks/redhat.yml
@@ -0,0 +1,4 @@
+---
+# empty.
+
+# vim: set tabstop=2 shiftwidth=2 expandtab smarttab: