https://github.com/xyhhx/ansible-kicksecure-docker-host

ansible playbook(s) for distro-morphing a debian server to kicksecure for use as a docker host
https://github.com/xyhhx/ansible-kicksecure-docker-host

ansible compose containers docker docker-compose hardening iac infrastructure-as-code kicksecure security security-hardening

Last synced: 18 days ago
JSON representation

ansible playbook(s) for distro-morphing a debian server to kicksecure for use as a docker host

• Host: GitHub
• URL: https://github.com/xyhhx/ansible-kicksecure-docker-host
• Owner: xyhhx
• License: wtfpl
• Created: 2024-05-30T17:08:01.000Z (8 months ago)
• Default Branch: main
• Last Pushed: 2024-05-31T08:27:43.000Z (8 months ago)
• Last Synced: 2024-11-16T00:37:15.506Z (3 months ago)
• Topics: ansible, compose, containers, docker, docker-compose, hardening, iac, infrastructure-as-code, kicksecure, security, security-hardening
• Language: Makefile
• Homepage: https://git.sr.ht/~xyhhx/ansible-kicksecure-docker-host
• Size: 8.79 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        


# Kicksecure Docker Host Playbook

Canonical Source: https://git.sr.ht/~xyhhx/ansible-kicksecure-docker-host

Mirrors:

[Github](https://github.com/xyhhx/ansible-kicksecure-docker-host) | [Codeberg](https://codeberg.org/xyhhx/ansible-kicksecure-docker-host)



Use these playbooks to configure a Debian server to be distro-morphed to [Kicksecure](https://kicksecure.org), hardened a bit more, and configured to run Docker.

This playbook was tested using OVH servers with an SSH key preinstalled (on the `debian` user instead of `root`)

## Usage

### Prerequisites

You need a Linux (or Unix) system with only a few things preinstalled:

- [GNU Make](https://www.gnu.org/software/make/)

- [Ansible](https://www.ansible.com)

### Set up 

1. I generate a random word for my privileged user's username (security through obscurity bla bla bla)

1. I generate an Ed25519 SSH key

1. Set up the environment vars like so:

    ```sh

    cp .env.example .env

    # Fill out the env vars

    $EDITOR .env

    ```

1. Finally, install the required Ansible Galaxy collections

    ```sh

    make install-requirements

    ```

### Running the playbooks 

Just run the following commands and it should just set everything up for ya 

```sh

make a setup-user

make up

```