4 ms·

It took me about an hour to put all of this into an ansible playbook. I think there are couple of examples out on blogs about this as well. If there is interest

• nikhilalmeida 13y ago
  Please do.
• radioact1ve 13y ago
  Don't mind me, I'll just wait here till you're ready.
• OWaz 13y ago
  The most I know about securing a Linux vps I picked up from this: http://feross.org/how-to-setup-your-linode/ http://feross.org/how-to-setup-your-linode/ . If there is an ultimate resource on how to start securing a *nix vps then please do let me know. If I knew what to search for I could but a lot of this is unknown unknowns to me.
  • mverwijs 13y ago
    After having fixed a sudo user (and confirm it works!), please also disable PermitRootLogin by setting it to 'no'. Restart ssh after editing sshd_conf. If you're squeemish, run dropbear on another port so you can log into your machine in case you made a boo-boo configuring openssh. Also, more resources for security settings: https://benchmarks.cisecurity.org/downloads/multiform/index.cfm https://benchmarks.cisecurity.org/downloads/multiform/index....
• flexd 13y ago
  I'd like a copy of that playbook too :-), publish it somewhere?
• mimiflynn 13y ago
  yes please
• nolite 13y ago
  ditto
• chris_mahan 13y ago
  Please! Give us your address so we can send you money.
• jnsaff2 13y ago
  I remembered correctly, someone had already done that: http://lattejed.com/first-five-and-a-half-minutes-on-a-server-with-ansible http://lattejed.com/first-five-and-a-half-minutes-on-a-serve... Shameless plug: a small side project I did with my team at nodeSWAT [1]: CMify [2] - a web service to easily generate your ansible playbooks. Somewhat naive so far, if there is interest we'll extend it. [1] http://nodeswat.com http://nodeswat.com [2] https://cmify.com https://cmify.com