---
# OS-specific variables for Debian/Ubuntu
security_packages:
  - ufw
  - fail2ban
  - unattended-upgrades
  - apt-listchanges
  - logwatch
  - rkhunter
  - chkrootkit

# Services
security_services:
  - ufw
  - fail2ban
  - unattended-upgrades

# Package management
package_manager: apt
update_cache_command: "apt-get update"
upgrade_command: "apt-get upgrade -y"