dev-sec / hardening Goto Github PK

View Code? Open in Web Editor NEW

315.0 40.0 40.0 69 KB

DevSec Examples

Home Page: http://dev-sec.io/

License: Apache License 2.0

Ruby 70.43% Puppet 6.32% Dockerfile 23.25%

hardening's Introduction

DevOps Server Hardening

The Hardening Framework combines DevOps with Security. It implements hardening for Puppet, Chef and Ansible.

One of the main goals for the Hardening Framework it to provide security as a plug-in mechanism. All modules are implemented as overlay modules and work in conjunction with the corresponding open source module like apache or nginx. This enables you to drop in hardening for your staging and production environments and reuse existing developments.

Components

The framework consists of multiple hardening components:

Most components are implemented in Ansible, Chef and Puppet.

Layout

This repository contains examples and tools to harden your server. A subfolder for each DevOps tool exists and a readme guides you accordingly:

├── LICENSE
├── README.md
├── ansible-linux
├── chef-linux
└── puppet

License and Author

Author:: Dominik Richter [email protected]
Author:: Christoph Hartmann [email protected]
Author:: Sebastian Gumprich [email protected]
Author:: Deutsche Telekom AG

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

hardening's People

Contributors

Stargazers

Watchers

Forkers

fernandowiek fr34k8 suwaji 4sp1r3 asadexpert rx007 atomic111 jjediny anwaryagoub pabit slitayem dugites akalra rbramwell netman2k kainlite geraldolsribeiro dhirenshumsher infinititasker icute1349 ruben-nieva maxdu92 talits ddtrung-fs jairmenezes palfaiate noskill1337 wheelq karthik137 lbalak50 tntwebwiz renangraciano ryugei bharath6208 mekhanique iq-scm x86dx2 gmmos vzradha jurgenjordaan-flash

hardening's Issues

Fix link in the README

Hi.

This is certainly not urgent but it would be nice if you can fix the link in the first
line of the README ("The Hardening Framework combines DevOps with Security"):
the 'Hardening Framework' is still pointing to 'hardening.io' and not to 'dev-sec.io'.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Update dependency highline to v3
Update dependency inspec to v6
Update ubuntu Docker tag to v24
Click on this checkbox to rebase all open PRs at once

Detected dependencies

bundler

ansible-linux/Gemfile

chef-linux/Gemfile

rack '3.0.11'

inspec '~> 5'

rubocop '~> 1.63.0'

highline '~> 2.1.0'

chef-windows/Gemfile

rack '3.0.11'

inspec '~> 5'

rubocop '~> 1.63.0'

highline '~> 2.1.0'

dockerfile

puppet/Dockerfile

ubuntu 22.04

github-actions

.github/workflows/codespell.yml

puppet

puppet/Puppetfile

Check this box to trigger a request for Renovate to run again on this repository

Is this project still alive or is it dead?

Hi, I am especially interested in progress on the ansible modules. What is the status of this project?
Thanks for your attention!

Question: SSH login

Hi Experts,

I've ran the knife solo bootstrap command to a DigitalOcean server, using the Chef all in one example.
Then I've got "Too many authentication failures" when trying to ssh it.
Anything special I should config before or afterwards to fix this?

Cheers,
Michael

Missing word in README

There seems to be missing a verb:

One of the main goals for the Hardening Framework is the plug-in architecture. All modules are implemented as overlay modules and can be easily with the corresponding open source module.

Combined?

Keep repo up to date

Hi,

It's kinda pointless to have an example repo that's 2 years behind all across the line.