OS-Hardening
ansible-role-security
Our great sponsors
OS-Hardening | ansible-role-security | |
---|---|---|
2 | 7 | |
32 | 760 | |
- | - | |
0.0 | 5.0 | |
over 2 years ago | about 1 month ago | |
Shell | Jinja | |
The Unlicense | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
OS-Hardening
-
Secure your Cloud Server from Hackers with Fail2Ban
Have a look at: https://github.com/ITNerdbox/OS-Hardening/blob/master/sshd_config - It's a hardened configuration for the ssh daemon.
-
First self hosted project (How to achieve secure remote SSH access)
Operating system hardening is something you might want to consider. I've written a script that does a lot of OS hardening already. If you're interested, have a look at: https://github.com/ITNerdbox/OS-Hardening
ansible-role-security
-
Can't access to my nas after I create some group
My playbook is only doing some software installation (openzfs, ...) and some SSH configuration (something really similar to jeff geerling : https://github.com/geerlingguy/ansible-role-security ), and it works perfectly without the tasks where I create groups and add user to these groups.
- Wie Rootserver sicher machen?
-
Selfhosting Security for Cloud Providers like Hetzner
I suggest these resources: - Some fundamentals: https://www.cyberciti.biz/tips/linux-security.html - One of the best imho ( exhaustive list ): https://github.com/imthenachoman/How-To-Secure-A-Linux-Server - Ansible playbook to harden security by Jeff Geerling: https://github.com/geerlingguy/ansible-role-security - OAWSP Check list ( targeted for web apps... and honestly a bit overkill ): https://github.com/0xRadi/OWASP-Web-Checklist
-
Good server setup tutorials
THAT all being said. Check out this: https://github.com/geerlingguy/ansible-role-security. YOu can see everything Jeff Does. My guy is a mad genious :).
-
My First 5 Minutes On A Server; Or, Essential Security for Linux Servers
Solid advice, most of it is now covered by GeerlingGuy's Security Ansible role (https://github.com/geerlingguy/ansible-role-security) and the Firewall one (https://github.com/geerlingguy/ansible-role-firewall).
-
Arma 3 Server tips?
yea, what jessel0l said (or vlan) plus you could use something like chroot or podman to separate privileges. Remember to set up fail2ban sane and easy starting point might be https://github.com/geerlingguy/ansible-role-security
- Secure your Cloud Server from Hackers with Fail2Ban
What are some alternatives?
udm-kernel-tools - Tools for bootstrapping custom kernels on the UniFi Dream Machine
ansible-role-hardening - Ansible role to apply a security baseline. Systemd edition.
SkiffOS - Any Linux distribution, anywhere.
ansible-role-java - Ansible Role - Java
lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
ansible-role-mysql - Ansible Role - MySQL
ansible-role-nginx - Ansible Role - Nginx
anaconda - System installer for Fedora, RHEL and other distributions
ubuntu_on_HPE_ProLiant_MS_GEN10 - Ubuntu Server on HPE ProLiant MicroServer Gen10 tutorial with extras.
OWASP-Web-Checklist - OWASP Web Application Security Testing Checklist
CW-ROLE - Ansible role for automated installation of nextcloud with setup of nginx, php, redis, selinux, firewalld and postgresql.
ansible-role-docker - Ansible Role - Docker