This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
SSHD hardening for ed25519 key pairs
Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
🥷🏻 Various bash stuff i find good to have 🔰
Advanced Privacy-Box: A RaspberryPi USB Ethernet Gadget that safeguards your Privacy while you work on your computer - Route all traffic through a WireGuard VPN or through a Tor Transparent Proxy, block ads and trackers via AdGuard Home, spoof your devices identity and cover your tracks.
Ansible role that hardens SSH server and client configurations based on ssh-audit recommendations. Supports Debian, Ubuntu, Rocky Linux 9, and Amazon Linux 2023. Provides safe defaults, repeatable audits, host key regeneration, brute-force mitigation and client hardening.
Linux 服务器 SSH 密钥登录配置工具：支持 GitHub 公钥导入、本机 Ed25519 密钥生成、禁用密码登录、备份恢复。
14 production-ready security components for Ubuntu hardening (CIS Benchmark 100%). Boot, AIDE, SSH, kernel, rkhunter, auditd (CIS 4.1.x), AppArmor, Vaultwarden, UFW, nftables, fail2ban, Lynis. Modular drop-in configs, Prometheus monitoring-ready. MIT License.
Friendly, safe, interactive Bash script for Ubuntu Server & Desktop initial setup and post-install hardening — UFW firewall, Fail2ban, SSH hardening, automatic security updates, swap, Docker, dev tools. Beginner-friendly, dry-run, idempotent. Ubuntu 22.04 & 24.04 LTS.
Production-grade AWS EC2 security hardening using PowerShell & AWS CLI. Covers SSH hardening, UFW firewall, Fail2ban brute-force protection, CloudWatch monitoring, and automated stability setup on Ubuntu 22.04.
🚀 一键部署 VPS 的 Windows 命令行工具 | A Windows CLI tool to bootstrap VPS
Linux-SecHardening-Tool（基于Linux系统的安全加固工具的优化与可视化实现），基于FastAPI+Vue3开发。支持多会话WebSSH、系统基线检查、一键安全加固、漏洞POC扫描、日志审计、AI安全助手；包含用户权限/密码策略/SSH防护/暴力破解防护等自动化加固能力，适配Ubuntu/Debian/CentOS，全操作日志入库审计。
Ansible infrastructure-as-code for Linux server provisioning, hardening, and lifecycle management. 27 production-ready roles covering security, networking, databases, VPN, monitoring, and automated upgrades across Debian, RedHat, OpenBSD, FreeBSD, and macOS.
Hardening SSH on a 32‑bit Alpine Linux system.
SSH hardening + Fail2Ban installer & monitoring menu for Debian/Ubuntu servers.
In this repo, i simulate enterprise IT environments through hands-on infrastructure engineering, automation, monitoring, and identity management.
Agent skill that audits and hardens basic security on a Debian/Ubuntu server over SSH with fail-safe rollback for sshd changes.
Defense-in-depth Linux hardening with Snort IDS, Fail2Ban, SSH hardening, and file integrity monitoring achieving 100% attack detection
Add a description, image, and links to the ssh-hardening topic page so that developers can more easily learn about it.
To associate your repository with the ssh-hardening topic, visit your repo's landing page and select "manage topics."