Welcome to the Ansible Collection Hardening repository. This collection helps you secure your Linux systems, ensuring that your SSH, nginx, and MySQL configurations follow best practices. Letβs get you set up to enjoy a safer computing environment.
This Ansible collection provides battle-tested hardening for various components of Linux systems. Hardening refers to the process of securing a system by reducing its surface of vulnerability. With this collection, you will efficiently manage security for:
To use this Ansible collection, you need the following:
Download the Release: Visit this page to download: Download the Latest Release.
Extract the Files (if necessary): If the download is a compressed file (like .zip or .tar.gz), extract it to your desired location on your system.
ansible-galaxy collection install <path-to-extracted-folder>
Replace <path-to-extracted-folder> with the path where you saved the files.
ansible-playbook <playbook_name>.yml
Replace <playbook_name>.yml with the name of the specific playbook you wish to apply.
Once installed, you can configure each part with the provided roles in the collection. Hereβs a quick breakdown of how to use them:
ssh_hardening role by running:
ansible-playbook ssh_hardening.yml
nginx_hardening role, execute:
ansible-playbook nginx_hardening.yml
ansible-playbook mysql_hardening.yml
Refer to the playbook documentation inside the collection for detailed parameters and options.
For detailed documentation about each role and options available, please refer to the Markdown files located in the docs directory within the collection. Each file will guide you through parameters and best practices for maximum security.
If you wish to learn more about hardening practices or contribute to the project, we encourage you to explore the following topics:
Join our community to share your experience and help others. You can find us on GitHub Discussions.
If you encounter any issues or have questions, check the open issues on the GitHub repository. This is also a great place to suggest new features or improvements.
For your convenience, you can also visit this page to download the latest version of this collection.