v0.8

Breaking Changes ⚠️⚠️⚠️

• Drop support for Achlinux
• Drop support for RHEL <= 7
• Remove the security_fail2ban_banaction variable
  • For Debian-based systems, fail2ban's default banaction will be used
  • For RedHat-based systems, if firewalld is running, it will be used as the banaction
    • This can be controlled via the security_fail2ban_use_firewalld_on_rhel variable

Other Changes

• Creation of a fail2ban ssh jail can now be controlled via the security_fail2ban_add_ssh_jail variable (defaults to true)
• unattanded-upgrades can now pull updates from ESMA (Extended Security Maintenance), if available
• Project dependencies are now managed via Nix flakes

Minor fixes

• Some typos
• Use FQDNs for module names
• Comply to ansible-lint rules

Testing

• Test using molecule-vagrant instead of docker