ansible-role-dotfiles
Ansible Role - Easy and flexible dotfile installation. (by geerlingguy)
ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL (by dev-sec)
| ansible-role-dotfiles | ansible-collection-hardening | |
|---|---|---|
| 3 | 25 | |
| 223 | 3,704 | |
| - | 1.9% | |
| 4.6 | 9.1 | |
| 4 months ago | 11 days ago | |
| Jinja | ||
| MIT License | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ansible-role-dotfiles
Posts with mentions or reviews of ansible-role-dotfiles.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-19.
-
Yet another Ansible playbook
Current list of capabilities: - Software - Install APT, Snap, Flatpak, or Homebrew packages. - Install extra PIP or NPM packages. - Dotfiles - Clone a set of dotfiles from a given Git repo and link them to the users' home directory. (Role) - System Settings - hostname - Set a user-defined hostname. - directories - Create custom user directories. - sudoers - Apply custom user sudoers config. - fonts - Download and install Nerd Fonts. - ZSH - Install and configure ZSH and Oh-My-ZSH - Install custom OMZ plugins and themes. - TMUX - Install and configure TMUX and TPM (Plugin manager) - GNOME - Customizes the GNOME desktop (Role) - User Script - Execute arbitrary user script (for example, install.sh script from your dotfiles)
-
Monthly 'Shameless Self Promotion' thread - 2022/05
I was inspired by this one from geerlingguy https://github.com/geerlingguy/ansible-role-dotfiles and adjusted it for the stow format. Its nothing special but for my first role I am quite happy with it.
-
Ansible Role to install dotfiles with stow
This is my first post here and the first time I have really done something with ansible.Inspired by https://github.com/geerlingguy/ansible-role-dotfiles I wanted to make a similar role that workes with dotfile repos using the stow layout, such as mine.
ansible-collection-hardening
Posts with mentions or reviews of ansible-collection-hardening.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-06-16.
-
Ask HN: What open-source projects are you currently contributing to and why?
An ansible collection for hardening Linux systems I mostly wrote: https://github.com/dev-sec/ansible-collection-hardening
Another ansible collection to manage Icinga: https://github.com/T-Systems-MMS/ansible-collection-icinga-d...
And the yunohost app for invoice ninja: https://github.com/YunoHost-Apps/invoiceninja5_ynh
-
Ansible - how widely used is it ?
i have some packer builds where itll install ansible, run playbooks locally, then uninstall ansible. such as the the devsec os hardening role: https://github.com/dev-sec/ansible-collection-hardening
- What hardening before forwarding services?
-
Security Harden Ubuntu 22.04
This collection is also interesting https://github.com/dev-sec/ansible-collection-hardening/
-
What you guys use for website protection? We use sentinel one but doesn't cover web related items
Second you want to ensure the os is secure and up to date. Take a look at os hardening best practices, for example this ansible playbook for linux: https://github.com/dev-sec/ansible-collection-hardening
- Ansible for automation/ hardening.
-
How do you document your (whole) setup ? Looking for ideas.
To ensure SSH and other security related things are configured correctly, you can take a look at DevSec which helps you to apply proven security configuration principles. Also there is guides like "Secure Secure Shell" which can help you to better understand what you can do to increase the security of your servers (this one is from 2015 but many aspects are still relevant).
-
Recommendations for advanced material (reading material, courses, etc) on server security?
I learned a lot by using and reading through the source code of these ansible roles: https://github.com/dev-sec/ansible-collection-hardening
-
Ask HN: How to secure Ubuntu VPS in 2022?
Have a look at https://github.com/dev-sec/ansible-collection-hardening
-
SSH Bastion host best practices: How to Build and Deploy a Security-Hardened SSH Bastion Host
You can do much more https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/ssh_hardening
What are some alternatives?
When comparing ansible-role-dotfiles and ansible-collection-hardening you can also consider the following projects:
Sentry - Developer-first error tracking and performance monitoring
debian-cis - PCI-DSS compliant Debian 10/11/12 hardening
mac-playbook - MacOS setup and configuration via Ansible.
crowdsec - CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
pwsh - Powershell profile
goss - Quick and Easy server testing/validation
sentry-alert-manager - Configure Sentry.io alerts in bulk.
RHEL7-CIS - Ansible role for Red Hat 7 CIS Baseline
ansible-role-docker - Ansible Role - Docker
ansible-collection-nginx - Ansible collection for NGINX
ubuntu-playbook - Ubuntu setup and configuration via Ansible.
netboot.xyz - Your favorite operating systems in one place. A network-based bootable operating system installer based on iPXE.
ansible-role-dotfiles vs Sentry
ansible-collection-hardening vs debian-cis
ansible-role-dotfiles vs mac-playbook
ansible-collection-hardening vs crowdsec
ansible-role-dotfiles vs pwsh
ansible-collection-hardening vs goss
ansible-role-dotfiles vs sentry-alert-manager
ansible-collection-hardening vs RHEL7-CIS
ansible-role-dotfiles vs ansible-role-docker
ansible-collection-hardening vs ansible-collection-nginx
ansible-role-dotfiles vs ubuntu-playbook
ansible-collection-hardening vs netboot.xyz