ansible-anu
ansible-role-bootstrap
ansible-anu | ansible-role-bootstrap | |
---|---|---|
1 | 3 | |
13 | 192 | |
- | - | |
2.7 | 6.9 | |
about 1 year ago | 17 days ago | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ansible-anu
-
Ask HN: How do you securely self-host a server?
I prefer to run Ubuntu machines and at least in terms of provisioning a new secure server I built an Ansible playbook I called 'ANU' (as in A New Ubuntu). I'd expand to other distros, but then I'd have to change the name!
https://github.com/MitchellCash/ansible-anu
It is based on the DevSec OS/SSH hardening playbooks, but I lean closer towards ease-of-use over security where I think it makes sense. For example, I disable forced password rotation and I keep the default umask value of '022' instead of the more secure '027'.
When I come across something the upstream playbooks change that "gets in my way", I will disable it if the security trade off makes sense for me. I'm not running highly sensitive systems, so these trade-offs make sense for me, and maybe they will for you as well!
In terms of ongoing security upkeep, I run the usual `apt update && apt dist-upgrade` when I can, but I’ll be keeping my eye on this thread for additional advice.
ansible-role-bootstrap
- What do you use ansible for? Share your playbooks and resources?
-
Learning Ansible - what features should I explore?
Then also look at the ansible roles provided by him. And Robert De Bock also has pretty great content: https://robertdebock.nl/
-
How to test role on different ansible versions?
I use tox: https://github.com/robertdebock/ansible-role-bootstrap/blob/master/tox.ini
What are some alternatives?
pibox-os - 📦💻 The Official PiBox Operating System
ansible-node-exporter - Provision basic metrics exporter for prometheus monitoring tool
ops-utils - Scripts for setting up and running web infrastructures
ansible-blackbox-exporter - Blackbox prober exporter
molecule-vagrant - 🚧 Moved to molecule-plugins
ansible-role-dns - Install and configure dns on your system.
ansible-role-diskspace - Check diskspace (or inodes) available, fail if too low.
k3s-ansible - Deploy a k3s cluster with ansible
ansible-prometheus - Deploy Prometheus monitoring system
Home - Contains information about my Home Setup