What way can you install a PAM and set up proper password complexity policy in a Linux OS (for Ubuntu) but extend in ten steps?

Rules having to follow this:

Linux servers must adhere to the following standard.

All passwords must be a minimum of 8 characters.

All passwords must include at least one number.

All passwords must include at least one lowercase letter.

All passwords must include at least one special character.

All accounts must permit only 4 retries after entering improper passwords.