diff --git a/defaults/main.yml b/defaults/main.yml
index 2066405..c3fa604 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,9 +1,5 @@
 ---
 
-# main switches
-configure_anti_ddos: true  # mod_evasive
-configure_security: true  # https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
-
 # default config => is overwritten by provided config
 default_apache:
   sites: {}
@@ -166,37 +162,6 @@ default_site_config:
     key_size:
     email:
 
-default_modules:
-  # <IfModule ${MOD}>
-  # </IfModule>
-  prefork:  # see: https://httpd.apache.org/docs/2.4/mod/mpm_common.html
-    ifname: 'prefork.c'
-    settings:
-      StartServers: 5
-      MinSpareServers: 5
-      MaxSpareServers: 10
-      MaxRequestWorkers: 256
-      MaxConnectionsPerChild: 0
-  mod_evasive:
-    ifname: 'mod_evasive20.c'
-    settings:
-      DOSHashTableSize: 4096
-      DOSPageCount: 25
-      DOSSiteCount: 100
-      DOSPageInterval: 1
-      DOSSiteInterval: 1
-      DOSBlockingPeriod: 60
-      DOSLogDir: "{{ CONFIG.log.path }}"
-      # DOSSystemCommand:
-      # DOSEmailNotify: mail@yourdomain.com
-      DOSWhitelist: [
-        '127.0.0.*', '192.168.*.*', '10.*.*.*', '172.16.*.*', '172.17.*.*', '172.18.*.*', '172.19.*.*',
-        '172.20.*.*', '172.21.*.*', '172.22.*.*', '172.23.*.*', '172.24.*.*', '172.25.*.*', '172.26.*.*',
-        '172.27.*.*', '172.28.*.*', '172.29.*.*', '172.30.*.*', '172.31.*.*', '172.32.*.*',
-      ]
-
-APACHE_MODULES: "{{ default_modules | combine(modules, recursive=true) }}"
-
 apache_config_graylist: [
   'SSLEngine', 'SSLCertificateKeyFile', 'SSLCertificateFile', 'SSLCertificateChainFile', 'ErrorLog', 'CustomLog', 'ServerAdmin',
   'ServerAlias', 'ServerName', 'Redirect'
diff --git a/requirements.yml b/requirements.yml
index 94d1300..f852ec3 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -10,6 +10,4 @@ collections:
     source: 'https://galaxy.ansible.com'
 
 roles:
-  - src: 'https://github.com/ansibleguy/infra_certs.git'
-    version: 'stable'
-    name: 'ansibleguy.infra_certs'
+  - src: 'ansibleguy.infra_certs'