S

security

Ansible hardening for FreeBSD: SSH and 2FA, sshguard, CrowdSec, OpenBSM audit, AIDE, Lynis. Runs after ansible-base-freebsd, with an at(1) rollback to avoid lockouts.

Hardware kill-switch daemon for Linux and FreeBSD that shuts the machine down on unauthorized hardware changes.

Ansible hardening for Enterprise Linux hosts: SSH/2FA, auditd, AIDE, CrowdSec, fail2ban, scanners, reporting, and rollback safety.

openSUSE Leap Ansible hardening collection: SSH + 2FA, auditd, AIDE, CrowdSec, fail2ban, rootkit scanners, Lynis, with a systemd-timer rollback dead-man's-switch

Ansible hardening for Debian 13 hosts: SSH, CrowdSec/fail2ban, auditd/AIDE, sysctl, and PAM 2FA-- lockout-safe, runs after ansible-base-debian