{"id":23818800,"url":"https://github.com/blackieops/ansible-role-linux-hardening","last_synced_at":"2026-05-04T01:31:57.957Z","repository":{"id":135330900,"uuid":"572183046","full_name":"blackieops/ansible-role-linux-hardening","owner":"blackieops","description":"🐧🔒 An Ansible role with some Linux system hardening tasks.","archived":false,"fork":false,"pushed_at":"2023-10-09T18:55:35.000Z","size":15,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-02T06:16:59.022Z","etag":null,"topics":["ansible","ansible-role","debian","hardening","linux","rhel","security","ubuntu"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/blackieops.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2022-11-29T18:18:51.000Z","updated_at":"2023-01-08T06:00:01.000Z","dependencies_parsed_at":null,"dependency_job_id":"dd565cd8-e7ab-4c22-92e0-c5562da7a5d5","html_url":"https://github.com/blackieops/ansible-role-linux-hardening","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackieops%2Fansible-role-linux-hardening","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackieops%2Fansible-role-linux-hardening/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackieops%2Fansible-role-linux-hardening/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blackieops%2Fansible-role-linux-hardening/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/blackieops","download_url":"https://codeload.github.com/blackieops/ansible-role-linux-hardening/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240094985,"owners_count":19746790,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","ansible-role","debian","hardening","linux","rhel","security","ubuntu"],"created_at":"2025-01-02T06:17:02.230Z","updated_at":"2026-05-04T01:31:52.936Z","avatar_url":"https://github.com/blackieops.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Security Baseline: Linux Hardening\n\n[![Molecule Tests](https://github.com/blackieops/ansible-role-linux-hardening/actions/workflows/test.yml/badge.svg)](https://github.com/blackieops/ansible-role-linux-hardening/actions/workflows/test.yml)\n\nThis is an [Ansible][a] role that sets a OS security baseline for Linux\nsystems. This does **not** cover any specific software such as SSH or\nfirewalls, rather is only configuration and permissions for the OS itself.\n\n[a]: https://ansible.com\n\n## Supported Platforms\n\nWhile these tasks should be generic enough to work most Linux-based operating\nsystems, we specifically target:\n\n* Debian (Stable)\n* Ubuntu Server (LTS)\n* Enterprise Linux (RHEL-derived)\n\n## Usage\n\nInstall the role by adding either the Ansible Galaxy package or Git remote to\nyour `requirements.yml`:\n\n```yaml\n# via Galaxy\n- src: blackieops.linux_hardening\n\n# or via Git\n- src: https://github.com/blackieops/ansible-role-linux-hardening.git\n```\n\nThen install it with `ansible-galaxy`:\n\n```\n$ ansible-galaxy install -r requirements.yml\n```\n\nFinally, you can reference the role in your playbooks:\n\n```yaml\n- hosts: all\n  roles:\n    - { role: blackieops.linux_hardening }\n```\n\n## Configuration\n\nThe defaults should provide a solid baseline for the majority of systems,\nhowever if you have specific needs you can configure some of the specifics.\n\nCheck [the vars set in `defaults`][def] for an accounting and example of which\ntasks you can configure.\n\n[def]: ./defaults/main.yml\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblackieops%2Fansible-role-linux-hardening","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fblackieops%2Fansible-role-linux-hardening","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblackieops%2Fansible-role-linux-hardening/lists"}