ansible-role-security
r-selfhosted-security
Our great sponsors
| ansible-role-security | r-selfhosted-security | |
|---|---|---|
| 7 | 5 | |
| 763 | 211 | |
| - | - | |
| 5.0 | 1.8 | |
| about 1 month ago | about 2 years ago | |
| Jinja | ||
| MIT License | Creative Commons Attribution Share Alike 4.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ansible-role-security
-
Can't access to my nas after I create some group
My playbook is only doing some software installation (openzfs, ...) and some SSH configuration (something really similar to jeff geerling : https://github.com/geerlingguy/ansible-role-security ), and it works perfectly without the tasks where I create groups and add user to these groups.
- Wie Rootserver sicher machen?
-
Selfhosting Security for Cloud Providers like Hetzner
I suggest these resources: - Some fundamentals: https://www.cyberciti.biz/tips/linux-security.html - One of the best imho ( exhaustive list ): https://github.com/imthenachoman/How-To-Secure-A-Linux-Server - Ansible playbook to harden security by Jeff Geerling: https://github.com/geerlingguy/ansible-role-security - OAWSP Check list ( targeted for web apps... and honestly a bit overkill ): https://github.com/0xRadi/OWASP-Web-Checklist
-
Good server setup tutorials
THAT all being said. Check out this: https://github.com/geerlingguy/ansible-role-security. YOu can see everything Jeff Does. My guy is a mad genious :).
-
My First 5 Minutes On A Server; Or, Essential Security for Linux Servers
Solid advice, most of it is now covered by GeerlingGuy's Security Ansible role (https://github.com/geerlingguy/ansible-role-security) and the Firewall one (https://github.com/geerlingguy/ansible-role-firewall).
-
Arma 3 Server tips?
yea, what jessel0l said (or vlan) plus you could use something like chroot or podman to separate privileges. Remember to set up fail2ban sane and easy starting point might be https://github.com/geerlingguy/ansible-role-security
- Secure your Cloud Server from Hackers with Fail2Ban
r-selfhosted-security
- Good server setup tutorials
- Am I safe if my entire network is behind tailscale/zerotier?
-
How to properly secure the server?
For those looking to contribute a guide, check out https://github.com/justSem/r-selfhosted-security
- I've set up Geoip block on my website and it works too well.
-
Beginner guide: How to secure your self-hosted services
Here you go :) https://github.com/justSem/r-selfhosted-security/tree/main/beginners-guide
What are some alternatives?
ansible-role-hardening - Ansible role to apply a security baseline. Systemd edition.
docker-socket-proxy - Proxy over your Docker socket to restrict which requests it accepts
ansible-role-java - Ansible Role - Java
How-To-Secure-A-Linux-Server - An evolving how-to guide for securing a Linux server.
OS-Hardening - Hardening the Linux operating system for Debian like distributions.
lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
ansible-role-mysql - Ansible Role - MySQL
Keycloak - Open Source Identity and Access Management For Modern Applications and Services
ansible-role-nginx - Ansible Role - Nginx
Netmaker - Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
anaconda - System installer for Fedora, RHEL and other distributions
tailscale - The easiest, most secure way to use WireGuard and 2FA.