---
# SUPERSEDED — do not use for new work.
#
# OS security hardening (SSH, UFW, fail2ban, HISTCONTROL) is now owned by
# the railiance-hosts repository:
#
#   railiance-hosts/ansible/roles/base/
#   railiance-hosts/spec/server-baseline.yaml   ← authoritative spec
#   railiance-hosts/goss/baseline.yaml          ← automated assertions
#
# Run `make converge` in railiance-hosts before deploying anything from
# this repo. See ADR-002 for the full boundary definition:
#   railiance-hosts/docs/adr/ADR-002-repo-boundary-hosts-vs-bootstrap.md
#
# This file is retained to avoid breaking git history references.
# It must not be imported or executed.