{"id":20536618,"url":"https://github.com/xyhhx/ansible-kicksecure-docker-host","last_synced_at":"2026-04-29T16:08:15.109Z","repository":{"id":241934322,"uuid":"808244035","full_name":"xyhhx/ansible-kicksecure-docker-host","owner":"xyhhx","description":"ansible playbook(s) for distro-morphing a debian server to kicksecure for use as a docker host","archived":false,"fork":false,"pushed_at":"2024-05-31T08:27:43.000Z","size":9,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-06T03:35:42.291Z","etag":null,"topics":["ansible","compose","containers","docker","docker-compose","hardening","iac","infrastructure-as-code","kicksecure","security","security-hardening"],"latest_commit_sha":null,"homepage":"https://git.sr.ht/~xyhhx/ansible-kicksecure-docker-host","language":"Makefile","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"wtfpl","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/xyhhx.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-30T17:08:01.000Z","updated_at":"2024-05-31T08:28:49.000Z","dependencies_parsed_at":"2024-05-30T20:32:36.883Z","dependency_job_id":"97db50e5-530f-4e82-946c-7280d018bff6","html_url":"https://github.com/xyhhx/ansible-kicksecure-docker-host","commit_stats":null,"previous_names":["xyhhx/ansible-kicksecure-docker-host"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/xyhhx/ansible-kicksecure-docker-host","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xyhhx%2Fansible-kicksecure-docker-host","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xyhhx%2Fansible-kicksecure-docker-host/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xyhhx%2Fansible-kicksecure-docker-host/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xyhhx%2Fansible-kicksecure-docker-host/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/xyhhx","download_url":"https://codeload.github.com/xyhhx/ansible-kicksecure-docker-host/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xyhhx%2Fansible-kicksecure-docker-host/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":268448204,"owners_count":24251999,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-02T02:00:12.353Z","response_time":74,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","compose","containers","docker","docker-compose","hardening","iac","infrastructure-as-code","kicksecure","security","security-hardening"],"created_at":"2024-11-16T00:37:18.568Z","updated_at":"2025-10-29T12:21:05.117Z","avatar_url":"https://github.com/xyhhx.png","language":"Makefile","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n# Kicksecure Docker Host Playbook\n\nCanonical Source: https://git.sr.ht/~xyhhx/ansible-kicksecure-docker-host\n\nMirrors:\n[Github](https://github.com/xyhhx/ansible-kicksecure-docker-host) | [Codeberg](https://codeberg.org/xyhhx/ansible-kicksecure-docker-host)\n\n\u003c/div\u003e\n\nUse these playbooks to configure a Debian server to be distro-morphed to [Kicksecure](https://kicksecure.org), hardened a bit more, and configured to run Docker.\n\nThis playbook was tested using OVH servers with an SSH key preinstalled (on the `debian` user instead of `root`)\n\n## Usage\n\n### Prerequisites\n\nYou need a Linux (or Unix) system with only a few things preinstalled:\n\n- [GNU Make](https://www.gnu.org/software/make/)\n- [Ansible](https://www.ansible.com)\n\n### Set up \n\n1. I generate a random word for my privileged user's username (security through obscurity bla bla bla)\n1. I generate an Ed25519 SSH key\n1. Set up the environment vars like so:\n\n    ```sh\n    cp .env.example .env\n    # Fill out the env vars\n    $EDITOR .env\n    ```\n\n1. Finally, install the required Ansible Galaxy collections\n\n    ```sh\n    make install-requirements\n    ```\n\n\n### Running the playbooks \n\nJust run the following commands and it should just set everything up for ya \n\n```sh\nmake a setup-user\nmake up\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxyhhx%2Fansible-kicksecure-docker-host","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fxyhhx%2Fansible-kicksecure-docker-host","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxyhhx%2Fansible-kicksecure-docker-host/lists"}