Ritsuko IaC for my servers based on Ansible Note on the selinux sshd policy The playbook currently doesn't install it, as I'm debating whether that's really useful in production