ansible

Ansible quickstart for secure baselines (idempotent and testable)

by

Outcome: apply your SSHD/PAM/fail2ban defaults across hosts safely, with check/diff runs and a skeleton for tests. 1) Layout baseline/ ├─ inventory.yaml ├─ site.yaml └─ roles/ └─ hardening/ ├─ tasks/main.yaml ├─ templates/sshd_config.j2 └─ files/sudoers_logging 2) Inventory # inventory.yaml all: hosts: web1.example.com: db1.example.com: vars: ansible_user: admin 3) Playbook # site.yaml – hosts: all become: true roles: – … Read more

Automating Linux Patch Management with Ansible

by

Why Patching Matters Most breaches exploit known vulnerabilities, often months or years old. WannaCry (2017) succeeded because thousands of systems weren’t patched despite updates being available. Even today, unpatched Apache, Exim, or kernel flaws are exploited within days of disclosure. Manual patching doesn’t scale. Clients need automation. Ansible Patch Management Checklist Inventory Hosts Define Linux … Read more