{"id":17924890,"url":"https://github.com/diptochakrabarty/server-hardening","last_synced_at":"2026-04-28T20:03:56.322Z","repository":{"id":113312878,"uuid":"247211348","full_name":"DiptoChakrabarty/Server-Hardening","owner":"DiptoChakrabarty","description":"Ansible Playbooks for Server Hardening , these playbooks have been tested in AWS servers to provide and configure  security in multiple servers","archived":false,"fork":false,"pushed_at":"2020-03-26T18:27:07.000Z","size":1282,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-04-03T09:32:19.565Z","etag":null,"topics":["ansible","ansible-galaxy","ansible-playbooks","ansible-role","automation","security","security-automation","security-hardening","security-testing","server"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/DiptoChakrabarty.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-03-14T04:28:10.000Z","updated_at":"2022-09-22T10:53:03.000Z","dependencies_parsed_at":null,"dependency_job_id":"96284290-d908-45aa-b4ac-bc294b7dfaaa","html_url":"https://github.com/DiptoChakrabarty/Server-Hardening","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/DiptoChakrabarty/Server-Hardening","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DiptoChakrabarty%2FServer-Hardening","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DiptoChakrabarty%2FServer-Hardening/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DiptoChakrabarty%2FServer-Hardening/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DiptoChakrabarty%2FServer-Hardening/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/DiptoChakrabarty","download_url":"https://codeload.github.com/DiptoChakrabarty/Server-Hardening/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DiptoChakrabarty%2FServer-Hardening/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32396789,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-28T19:38:08.556Z","status":"ssl_error","status_checked_at":"2026-04-28T19:37:55.688Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","ansible-galaxy","ansible-playbooks","ansible-role","automation","security","security-automation","security-hardening","security-testing","server"],"created_at":"2024-10-28T20:51:30.269Z","updated_at":"2026-04-28T20:03:56.305Z","avatar_url":"https://github.com/DiptoChakrabarty.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\n## Table of Contents\n\n* [About the Project](#about-the-project)\n  * [Built With](#built-with)\n* [Getting Started](#getting-started)\n  * [Prerequisites](#prerequisites)\n  * [Installation](#installation)\n* [Usage](#usage)\n* [Contributing](#contributing)\n* [License](#license)\n* [Contact](#contact)\n* [Acknowledgements](#acknowledgements)\n\n\n\n\n## About The Project\n\n\n\nThis is a Repository containing Server Hardening techniques which have been implemented using Ansible Roles.\n\nI have created ansible roles for the following tasks\n- accounts : this installs and configures fail2ban which helps in intrusion detection and system administrators can check illegal activities from logs\nAlso I have created a user ansible which is part of group power which I have given sudo powers\n\n- network : Here we make ssh more secure by only allowing key based login , adding protocol 2 and limiting the number of tries , preventing TcpForwarding and etc\nI have also added firewall rules to allow ssh access only from a particular network and only allow webserver access requests and removed all other rules\n\n- physical : This provides security against single user mode and only allows login using password in the grub and also provides security against all types of physical attacks\nAlso changes grub settings .\n\n-  luks-conf : make a harddisk encrypted for users and users will be able to store data securely and can decrypt it anytime using passphrase\n\nThe repository contains ansible vaults\nAll the vaults password is ansible\n\nAlong with that it contains a role for setting up and configuring docker and kubernetes in remote systems , the role name is kubernetes-docker\n\n\n### Built With\n\n* [Ansible](https://docs.ansible.com/)\n* [AWS](https://docs.aws.amazon.com/)\n* [Docker](https://docs.docker.com/)\n* [Kubernetes](https://kubernetes.io/docs/home/)\n\n\n\n\n## Getting Started\n\nThis is an example of how you may give instructions on setting up your project locally.\nTo get a local copy up and running follow these simple example steps.\n\n### Prerequisites\n\n* pip\n* AWS ec2 instance\n\n### Installation\n\n1. Clone the repo\n```sh\ngit clone https://github.com/DiptoChakrabarty/Server-Hardening\n```\n2. Setup ssh keys \n\n3. Enter and configure for remote systems \n\n4. Install Ansible\n```sh\npip install ansible\nor \nsudo apt install ansible\n```\n\n\n\n## Usage\n\nInstall ansible \n\n\u003cimg src=\"images/install.png\" alt=\"Logo\" \u003e\n\n\nSetup Docker and Kubernetes\n\n\u003cimg src=\"images/docker-kube.png\" alt=\"Logo\" \u003e\n\nSetup Firewall Rules\n\u003cimg src=\"images/iptables.png\" alt=\"Logo\"\u003e\n\nCreate Super User and setup fail2ban\n\u003cimg src=\"images/acc.png\" alt=\"Logo\" \u003e\n\n\n\n\n\n\n## Contributing\n\nContributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are **greatly appreciated**.\n\n1. Fork the Project\n2. Create your Feature Branch (`git checkout -b feature/AmazingFeature`)\n3. Commit your Changes (`git commit -m 'Add some AmazingFeature'`)\n4. Push to the Branch (`git push origin feature/AmazingFeature`)\n5. Open a Pull Request\n\n\n\n\n## License\n\nDistributed under the MIT License. See `LICENSE` for more information.\n\n\n\n## Contact\n\n\n- Your Name - Dipto Chakrabarty\n \n- You can contact me at diptochuck123@gmail.com\n\n- Project Link: [https://github.com/DiptoChakrabarty/Server-Hardening](https://github.com/DiptoChakrabarty/Server-Hardening)\n\n\n\n\n## Acknowledgements\n* [GitHub Emoji Cheat Sheet](https://www.webpagefx.com/tools/emoji-cheat-sheet)\n* [Img Shields](https://shields.io)\n* [Choose an Open Source License](https://choosealicense.com)\n* [GitHub Pages](https://pages.github.com)\n* [Animate.css](https://daneden.github.io/animate.css)\n* [Loaders.css](https://connoratherton.com/loaders)\n* [Slick Carousel](https://kenwheeler.github.io/slick)\n* [Smooth Scroll](https://github.com/cferdinandi/smooth-scroll)\n* [Sticky Kit](http://leafo.net/sticky-kit)\n* [JVectorMap](http://jvectormap.com)\n* [Font Awesome](https://fontawesome.com)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdiptochakrabarty%2Fserver-hardening","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdiptochakrabarty%2Fserver-hardening","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdiptochakrabarty%2Fserver-hardening/lists"}