feat: dev-sec.io linux baseline hardening

debian/Makefile

@@ -1,3 +1,9 @@
+env: ## Init environment
+	terraform init
+	ansible-galaxy install -r ./ansible/requirements.yml
+	virtualenv vent
+	. ./venv/bin/activate && pip install -r requirements.txt
+
 default:
 	terraform plan --out=plan
 	terraform apply plan
@@ -8,6 +14,7 @@ inventory: ## Deploy server
  
 configure: ## Configure server
 	ansible-playbook -i ./ansible/inventory/hosts.ini -f 10 ./ansible/playbook.yml
+	ansible-playbook -i ./ansible/inventory/hosts.ini -f 10 ./ansible/linux-baseline.yml
 
 ansible-check: ## Check Ansible playbooks
 	ansible-playbook --check ./ansible/playbook.yml

debian/ansible/linux-baseline.yml

@@ -0,0 +1,10 @@
+- name: dev-sec.io linux baseline hardening
+  hosts: debainbasic
+  remote_user: root
+
+  collections:
+    - devsec.hardening
+  roles:
+    - os_hardening
+    - ssh_hardening
+    - nginx_hardening

debian/ansible/requirements.yml

@@ -0,0 +1,3 @@
+---
+collections:
+- devsec.hardening