durcit le serveur : pare-feu nftables, SSH par clé, fail2ban, chrony, mises à jour de sécurité

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

ansible/roles/durcissement/handlers/main.yml

@@ -0,0 +1,23 @@
+---
+- name: recharger nftables
+  ansible.builtin.systemd:
+    name: nftables
+    state: restarted
+    enabled: true
+
+- name: recharger ssh
+  ansible.builtin.service:
+    name: ssh
+    state: reloaded
+
+- name: redémarrer fail2ban
+  ansible.builtin.systemd:
+    name: fail2ban
+    state: restarted
+    enabled: true
+
+- name: redémarrer chrony
+  ansible.builtin.systemd:
+    name: chrony
+    state: restarted
+    enabled: true