dev-sec/ansible-collection-hardening

Health v2 · maintenance only

Adoption not part of the score

5450 stars · 830 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

An Ansible collection of battle-tested hardening roles for Linux operating systems, SSH, nginx, and MySQL/MariaDB. It automates secure configuration and attack-surface reduction, aligned with the DevSec InSpec compliance baselines.

Use cases

• harden linux servers with ansible
• secure sshd configuration automatically
• apply cis-style hardening to ubuntu and debian servers
• harden nginx and mysql configurations
• automate server security compliance
• reduce attack surface of cloud vms
• enforce secure sysctl kernel settings

When to choose

• you use Ansible to provision or manage Linux servers and want automated, tested hardening
• you need compliance with DevSec/InSpec baselines or similar security standards
• you want maintained, community-validated secure defaults for SSH, nginx, MySQL, and the OS

When to avoid

• your infrastructure is not managed with Ansible (consider the Chef or Puppet variants of dev-sec instead)
• you need hardening for Windows servers or other services like Apache or PostgreSQL
• you require fully hands-off compliance certification rather than configuration automation

Facets

plugin · maturity active

security configuration-management developer-tools security self-hosted infrastructure-as-code self-hosted cloud ansible ansible-collection hardening ssh-hardening os-hardening nginx-hardening mysql-hardening sysctl devsec compliance cis-benchmark devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dev-sec/ansible-collection-hardening")