ansible-collection-hardening VS ansible-collection-nginx

An ansible collection for hardening Linux systems I mostly wrote: https://github.com/dev-sec/ansible-collection-hardening

Another ansible collection to manage Icinga: https://github.com/T-Systems-MMS/ansible-collection-icinga-d...

And the yunohost app for invoice ninja: https://github.com/YunoHost-Apps/invoiceninja5_ynh

This collection is also interesting https://github.com/dev-sec/ansible-collection-hardening/

To ensure SSH and other security related things are configured correctly, you can take a look at DevSec which helps you to apply proven security configuration principles. Also there is guides like "Secure Secure Shell" which can help you to better understand what you can do to increase the security of your servers (this one is from 2015 but many aspects are still relevant).

I learned a lot by using and reading through the source code of these ansible roles: https://github.com/dev-sec/ansible-collection-hardening

You can do much more https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/ssh_hardening

In the past, I have used the inspec part of : https://dev-sec.io

There’s Dev-Sec which is more about multi-OS-platform as well as multi-IaS (Ansible, Puppet, Chef).

Free, to boot.

https://github.com/dev-sec/ansible-collection-hardening

It's one of the most secure services to expose over the Internet (assuming you've setup key-based authentication - and some additional measures like restricting SSH access to a group. You can harden it a lot more)

$ sudo apt -y update $ sudo apt install -y ansible $ ansible-galaxy collection install nginxinc.nginx_core $ git clone https://github.com/nginxinc/ansible-collection-nginx.git