How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
This is an Ansible collection that automates security hardening for Linux operating systems, databases, web servers, and SSH services. It provides a declarative, modular architecture that enforces idempotent security configurations, ensuring that each task only applies changes when the current system state deviates from the desired security baseline. The collection organizes security configurations into reusable Ansible roles, each targeting a specific system component. It includes roles for hardening OpenSSH with key-only authentication and disabled root login, securing MySQL and MariaDB ins
This project is an Ansible-based automation suite designed to provision macOS development environments. It utilizes a set of playbooks to automate the installation of software, the configuration of system settings, and the setup of tools required for software engineering. The system distinguishes itself through variable-driven configuration and symlink-based dotfile syncing, allowing users to override default package lists and synchronize preferences from a central store. It supports both local setup and remote machine provisioning via SSH. The automation surface covers idempotent state mana
Kubespray is an Ansible-based tool for deploying production-ready Kubernetes clusters on physical or virtual machines across various environments. It serves as an infrastructure provisioner and cluster deployer that automates the installation and configuration of cluster nodes. The project functions as a bare metal cluster orchestrator, allowing for the setup of Kubernetes on physical hardware without relying on a managed cloud provider. It includes specialized installers for configuring networking fabrics, pod communication plugins, and routing policies. The framework also manages the insta
Pigsty is a comprehensive database infrastructure orchestration platform designed to automate the full lifecycle of high-availability PostgreSQL clusters. It functions as an infrastructure-as-code framework that manages cluster coordination, node provisioning, and service discovery through idempotent playbooks. By integrating distributed consensus mechanisms, the platform ensures automated failover and consistent state enforcement across diverse environments, including bare metal and virtualized infrastructure. The platform distinguishes itself through a robust suite of operational capabiliti
This project is a collection of automated hardening frameworks and Ansible roles designed to secure Linux systems, databases, SSH services, and web servers. It functions as a configuration framework that reduces the attack surface of Linux distributions through the automated enforcement of security policies.
The main features of dev-sec/ansible-os-hardening are: Ansible Playbooks, Secure Database Configurations, Ansible Modules, Linux Security Hardening, MySQL & MariaDB Hardening, SSH Service Hardening, Web Server Hardening, System State Idempotency.
Projects with overlapping indexed features include: dev-sec/ansible-collection-hardening — This is an Ansible collection that automates security hardening for Linux operating systems, databases, web servers,… geerlingguy/mac-dev-playbook — This project is an Ansible-based automation suite designed to provision macOS development environments. It utilizes a… kubernetes-sigs/kubespray — Kubespray is an Ansible-based tool for deploying production-ready Kubernetes clusters on physical or virtual machines… vonng/pigsty — Pigsty is a comprehensive database infrastructure orchestration platform designed to automate the full lifecycle of… owasp/top10 — This project is a web application security standard and vulnerability framework. It provides a comprehensive list of… artemmkin/infrastructure-as-code-tutorial — This project serves as an educational resource for mastering automated infrastructure provisioning, configuration…