DevSec Hardening Framework
Ansible roles that harden Linux hosts, OpenSSH, nginx, and MySQL
What it is
An Ansible collection with roles that apply security settings to Linux servers, OpenSSH, nginx, and MySQL or MariaDB. It covers kernel parameters via sysctl, SSH daemon configuration, web server and database defaults, and aims to pass the DevSec InSpec baselines. Sysadmins and DevOps teams add these roles to their playbooks to lock down fleets of Debian, Ubuntu, RHEL-family, and other distributions in a repeatable way.