Experimental Ansible roles and playbooks for modern Linux servers, targeting Ubuntu 14.04 LTS and potentially CentOS 7, derived from Sovereign and including code from similar projects such as Empress and Picayune. Pure gold.
If you’ve never used Ansible before, you a) are in for a treat and b) might find these playbooks useful to learn from, since they show off a fair bit of what the tool can do.
What do you get if you point this thing at a VPS? All kinds of good stuff!
- Firewall management via Uncomplicated Firewall (ufw).
- Intrusion prevention via fail2ban and rootkit detection via rkhunter.
- Secure on-disk storage via EncFS.
- Nightly backups to Tarsnap.
- collectd to collect system statistics.
- SSH configuration preventing root login and insecure authentication.
- A bunch of nice-to-have tools like that make life a little easier.
No setup is perfect, but the general idea is to provide a bunch of useful services while being secure and low-maintenance.
Because this code is derived from GPLv3 sources, original code is provided under the same license.