initial commit (confidential information removed)

vars/iptables.vault.example

+---
+# THIS IS AN EXAMPLE! DO NOT EDIT!!!
+# ANY CONFIDENTIAL EDITS SHOULD GO TO THE ENCRYPTED VAULT FILE!
+# VARIABLES THAT ARE NOT CONFIDENTIAL CAN GO TO A SEPARATE "*.YML" FILE.
+
+vault_iptables_input:
+  - comment: 'WHAT IS THIS RULE FOR?'
+    src: "192.168.1.0/24"
+    dest_port: "DESTINATION_PORT_NUMBER"
+    state: present
+#  - comment: 'ICMP RULES CANNOT USE COMMENTS! THIS IS BUGLAND!'
+  - proto: "icmp"
+    icmp_type: "echo-request"
+    limit: "10"
+    limit_burst: "100"
+    state: present
+  ...

vars/main.yml

+---

vars/rkhunter.vault.example

+---
+# THIS IS AN EXAMPLE! DO NOT EDIT!!!
+# ANY CONFIDENTIAL EDITS SHOULD GO TO THE ENCRYPTED VAULT FILE!
+# VARIABLES THAT ARE NOT CONFIDENTIAL CAN GO TO A SEPARATE "*.YML" FILE.
+
+vault_mail_on_warning: "example@example.com"