Top 3 Jinja Hardening Projects
-
ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
Project mention: Wireguard traffic not arriving at server (VPS) | reddit.com/r/WireGuard | 2021-10-01Double checked if there wasn't a setting in the hardening baseline that was applied to this machine to screw up the connection (it seems to me there isn't). https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/os_hardening
-
Many thanks u/pixelavenger. While I did not (yet) find the specific CIS recommendation, but I did find this which indicates that disabling SCTP module is perhaps too strong a reaction if the only justification is disabling those networking features that are usually not used frequently (to reduce attack surface). Apparently there was a vulnerability in WebRTC's user-space SCTP implementation, which has hence been fixed. There seem to be no known vulnerabilities in linux kernel SCTP implementation. Do you think Azure Support might be requested to optionally enable SCTP kernel module in the images ? Thanks also for the idea about using Daemon-set approach, perhaps a bit kludgy for the needs, as one'd need to invent a way to synchronize the completion of Daemon-set's task of enabling SCTP and startup of application that needs SCTP. Still better than nothing at all.
-
-
Project mention: Running a Nginx container using rootless Docker with Ansible | news.ycombinator.com | 2021-01-28
Jinja Hardening related posts
Index
What are some of the best open-source Hardening projects in Jinja? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | ansible-collection-hardening | 2,522 |
| 2 | ansible-role-hardening | 241 |
| 3 | ansible-docker-rootless | 14 |
Are you hiring? Post a new remote job listing for free.
