Mac
brew install ansible
echo "w.x.y.z" > inv.ini
This assumes you can SSH as root into the machine.
ansible all -i inv.ini -m ping -u root
ansible-playbook basic_security.yml -i inv.ini -u root
- Unattended upgrades
- No SSH password authentication
- Custom SSH port (6677)
- Basic firewall configuration
- fail2ban
- logwatch notifying daily on [email protected]