.gitignore

@@ -1,2 +1 @@
 config/master.key
-npm.tgz

roles/firewall/tasks/main.yml

@@ -4,13 +4,6 @@
     name: iptables-persistent
     state: present
 
-# TURN IT OFF
-- name: Turn iptables off for now
-  service:
-    name: iptables
-    state: stopped
-    enabled: no
-
 - name: Allow all loopback traffic
   iptables:
     chain: INPUT

roles/nginx-proxy-manager/files/docker-compose.yml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   app:
-    image: jc21/nginx-proxy-manager:2.9.22
+    image: 'jc21/nginx-proxy-manager:latest'
     restart: unless-stopped
     ports:
       - 80:80 # Public HTTP Port
@@ -11,7 +11,5 @@ services:
       - ./data:/data
       - ./letsencrypt:/etc/letsencrypt
       - ./default.conf:/etc/nginx/conf.d/default.conf
-      # hack to avoid sed on default.conf
-      - /dev/null:/etc/s6-overlay/s6-rc.d/prepare/50-ipv6.sh
     environment:
       - AWS_CONFIG_FILE=/etc/letsencrypt/credentials/credentials-6

roles/ssh/tasks/main.yml

@@ -29,7 +29,7 @@
       filter = sshd
       #  notify: Restart fail2ban
 
-- name: Turn fail2ban off for now
+- name: Start fail2ban on boot
   service:
     name: fail2ban
     enabled: false