ragleap-ansible v0.1.0 release notes

First release of ragleap-ansible: Ansible roles that prepare a fresh Ubuntu 22.04 server.

Base role: packages, deploy user with key check, sudo, unattended upgrades
Opt-in SSH hardening (config validated with sshd -t and rolled back on failure; refused without a key)
Opt-in firewall (opens the real sshd port, refuses invalid ports)
Re-running changes nothing

Tested in Ubuntu 22.04 containers only. Not tested on a real server (real key login against hardened sshd, ufw enforcement, become: true on a real host). Does not install k3s, Helm or the charts yet.

pip install ragleap-ansible