{"repo":"dev-sec/ansible-collection-hardening","free":true,"listed":false,"github":"https://github.com/dev-sec/ansible-collection-hardening","clone":"git clone https://github.com/dev-sec/ansible-collection-hardening.git","description":"This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL","language":"Jinja","stars":5438,"topics":["ansible","sysctl","protection","hardening","role","playbook","linux","os-hardening","collection","mysql-hardening"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Ansible Collection - devsec.hardening Description This collection provides battle tested hardening for: - Linux operating systems: - CentOS Stream 9 - AlmaLinux 8/9/10 - Rocky Linux 8/9/10 - Debian 11/12/13 - Ubuntu 22.04/24.04/26.04 - Amazon Linux (some roles supported) - Arch Linux (some roles supported) - Fedora 42/43/44 (some roles supported) - Suse Tumbleweed (some roles supported) - MySQL - MariaDB = 5.5.65, = 10.1.45, = 10.3.17 - MySQL = 5.7.31, = 8.0.3 - Nginx 1.0.16 or later - OpenSSH 5.3 and later The hardening is intended to be compliant with the Inspec DevSec Baselines: - - - - Looking for the old roles? The roles are now part of the hardening-collection. We have kept the old releases of the os-hardening role in this repository, so you can find the them by exploring older tags. The last release of the standalone role was 6.2.0. The other roles are in separate archives repositories: - apache hardening - mysql hardening - nginx hardening - ssh hardening - windows hardening Minimum required Ansible-version - Ansible = 2.16 Included content - os hardening - mysql hardening - nginx hardening - ssh hardening In progress, not working: - apache hardening - windows hardening Installation Install the collection via ansible-galaxy: ansible-galaxy collection install devsec.hardening Using this collection Please refer to the examples in the readmes of the role. See Ansible Using collections for more details. Contributing to this collection See the contributor guideline. Releas","default_branch":null,"files":null,"tree":[],"storefront":"/r/dev-sec","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/dev-sec/ansible-collection-hardening/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}