Algo[1] may be a good fit for you. Just be aware the authors deliberately target only very recent clients. [2] I recently spun up a new Algo instance on an Ub

Algo[1] may be a good fit for you. Just be aware the authors deliberately target only very recent clients. [2] I recently spun up a new Algo instance on an Ubuntu host and discovered I could no longer SSH from an old Snow Leopard Mac because it locked sshd down to only 'modern ciphers'[3]. (No affiliation, just a fan) [1] https://github.com/trailofbits/algo https://github.com/trailofbits/algo [2] https://github.com/trailofbits/algo/issues/168 https://github.com/trailofbits/algo/issues/168 [3] https://github.com/trailofbits/algo/blob/master/roles/security/templates/sshd_config.j2#L48 https://github.com/trailofbits/algo/blob/master/roles/securi...