This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
SSHD hardening for ed25519 key pairs
Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
🥷🏻 Various bash stuff i find good to have 🔰
Advanced Privacy-Box: A RaspberryPi USB Ethernet Gadget that safeguards your Privacy while you work on your computer - Route all traffic through a WireGuard VPN or through a Tor Transparent Proxy, block ads and trackers via AdGuard Home, spoof your devices identity and cover your tracks.
Ansible role that hardens SSH server and client configurations based on ssh-audit recommendations. Supports Debian, Ubuntu, Rocky Linux 9, and Amazon Linux 2023. Provides safe defaults, repeatable audits, host key regeneration, brute-force mitigation and client hardening.
Menu-driven Bash installer that turns a fresh Ubuntu 24.04/26.04 VPS into a configured server: CLI tools, Docker, nginx, zram/swap, fail2ban, SSH & UFW hardening.
Linux 服务器 SSH 密钥登录配置工具：支持 GitHub 公钥导入、本机 Ed25519 密钥生成、禁用密码登录、备份恢复。
14 production-ready security components for Ubuntu hardening (CIS Benchmark 100%). Boot, AIDE, SSH, kernel, rkhunter, auditd (CIS 4.1.x), AppArmor, Vaultwarden, UFW, nftables, fail2ban, Lynis. Modular drop-in configs, Prometheus monitoring-ready. MIT License.
Production-grade AWS EC2 security hardening using PowerShell & AWS CLI. Covers SSH hardening, UFW firewall, Fail2ban brute-force protection, CloudWatch monitoring, and automated stability setup on Ubuntu 22.04.
Friendly, safe, interactive Bash script for Ubuntu Server & Desktop initial setup and post-install hardening — UFW firewall, Fail2ban, SSH hardening, automatic security updates, swap, Docker, dev tools. Beginner-friendly, dry-run, idempotent. Ubuntu 22.04 & 24.04 LTS.
Ansible infrastructure-as-code for Linux server provisioning, hardening, and lifecycle management. 27 production-ready roles covering security, networking, databases, VPN, monitoring, and automated upgrades across Debian, RedHat, OpenBSD, FreeBSD, and macOS.
Hardening SSH on a 32‑bit Alpine Linux system.
🚀 一键部署 VPS 的 Windows 命令行工具 | A Windows CLI tool to bootstrap VPS
SSH hardening + Fail2Ban installer & monitoring menu for Debian/Ubuntu servers.
Defense-in-depth Linux hardening with Snort IDS, Fail2Ban, SSH hardening, and file integrity monitoring achieving 100% attack detection
In this repo, i simulate enterprise IT environments through hands-on infrastructure engineering, automation, monitoring, and identity management.
✨ Simulation complète d'une infrastructure réseau SOHO sécurisée.
Add a description, image, and links to the ssh-hardening topic page so that developers can more easily learn about it.
To associate your repository with the ssh-hardening topic, visit your repo's landing page and select "manage topics."