https://github.com/diptochakrabarty/server-hardening
Ansible Playbooks for Server Hardening , these playbooks have been tested in AWS servers to provide and configure security in multiple servers
https://github.com/diptochakrabarty/server-hardening
ansible ansible-galaxy ansible-playbooks ansible-role automation security security-automation security-hardening security-testing server
Last synced: about 2 months ago
JSON representation
Ansible Playbooks for Server Hardening , these playbooks have been tested in AWS servers to provide and configure security in multiple servers
- Host: GitHub
- URL: https://github.com/diptochakrabarty/server-hardening
- Owner: DiptoChakrabarty
- License: mit
- Created: 2020-03-14T04:28:10.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2020-03-26T18:27:07.000Z (about 6 years ago)
- Last Synced: 2025-04-03T09:32:19.565Z (about 1 year ago)
- Topics: ansible, ansible-galaxy, ansible-playbooks, ansible-role, automation, security, security-automation, security-hardening, security-testing, server
- Homepage:
- Size: 1.22 MB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## Table of Contents
* [About the Project](#about-the-project)
* [Built With](#built-with)
* [Getting Started](#getting-started)
* [Prerequisites](#prerequisites)
* [Installation](#installation)
* [Usage](#usage)
* [Contributing](#contributing)
* [License](#license)
* [Contact](#contact)
* [Acknowledgements](#acknowledgements)
## About The Project
This is a Repository containing Server Hardening techniques which have been implemented using Ansible Roles.
I have created ansible roles for the following tasks
- accounts : this installs and configures fail2ban which helps in intrusion detection and system administrators can check illegal activities from logs
Also I have created a user ansible which is part of group power which I have given sudo powers
- network : Here we make ssh more secure by only allowing key based login , adding protocol 2 and limiting the number of tries , preventing TcpForwarding and etc
I have also added firewall rules to allow ssh access only from a particular network and only allow webserver access requests and removed all other rules
- physical : This provides security against single user mode and only allows login using password in the grub and also provides security against all types of physical attacks
Also changes grub settings .
- luks-conf : make a harddisk encrypted for users and users will be able to store data securely and can decrypt it anytime using passphrase
The repository contains ansible vaults
All the vaults password is ansible
Along with that it contains a role for setting up and configuring docker and kubernetes in remote systems , the role name is kubernetes-docker
### Built With
* [Ansible](https://docs.ansible.com/)
* [AWS](https://docs.aws.amazon.com/)
* [Docker](https://docs.docker.com/)
* [Kubernetes](https://kubernetes.io/docs/home/)
## Getting Started
This is an example of how you may give instructions on setting up your project locally.
To get a local copy up and running follow these simple example steps.
### Prerequisites
* pip
* AWS ec2 instance
### Installation
1. Clone the repo
```sh
git clone https://github.com/DiptoChakrabarty/Server-Hardening
```
2. Setup ssh keys
3. Enter and configure for remote systems
4. Install Ansible
```sh
pip install ansible
or
sudo apt install ansible
```
## Usage
Install ansible
Setup Docker and Kubernetes
Setup Firewall Rules
Create Super User and setup fail2ban
## Contributing
Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are **greatly appreciated**.
1. Fork the Project
2. Create your Feature Branch (`git checkout -b feature/AmazingFeature`)
3. Commit your Changes (`git commit -m 'Add some AmazingFeature'`)
4. Push to the Branch (`git push origin feature/AmazingFeature`)
5. Open a Pull Request
## License
Distributed under the MIT License. See `LICENSE` for more information.
## Contact
- Your Name - Dipto Chakrabarty
- You can contact me at diptochuck123@gmail.com
- Project Link: [https://github.com/DiptoChakrabarty/Server-Hardening](https://github.com/DiptoChakrabarty/Server-Hardening)
## Acknowledgements
* [GitHub Emoji Cheat Sheet](https://www.webpagefx.com/tools/emoji-cheat-sheet)
* [Img Shields](https://shields.io)
* [Choose an Open Source License](https://choosealicense.com)
* [GitHub Pages](https://pages.github.com)
* [Animate.css](https://daneden.github.io/animate.css)
* [Loaders.css](https://connoratherton.com/loaders)
* [Slick Carousel](https://kenwheeler.github.io/slick)
* [Smooth Scroll](https://github.com/cferdinandi/smooth-scroll)
* [Sticky Kit](http://leafo.net/sticky-kit)
* [JVectorMap](http://jvectormap.com)
* [Font Awesome](https://fontawesome.com)