The purpose of this repository is to provide scripts to help automate basic provisioning tasks on common server operating systems.
This respository is still very much a work in progress.
Disclaimer: Please ensure proper testing is preformed prior to running scripts within this repository in a production environment.
- Update Operating System.
- Install additional third-party software packages.
- Remove non-essential pre-installed software packages.
- Disable root user login.
- Setup a basic rule for the Uncomplicated Firewall (UFW).
- Disable password authentication to the server.
- Harden network settings.
- Modify swap usage based on installed memory.
- Install and configure Auditd.
- And more!
In progress.
In progress.
Please submit all improvements, contributions, and fixes as a GitHub issue or a pull request.
- Add configuration for rsyslog forwarding
- Add create user option
- Add create group option
- Add CIS templates
- Provide tests
- Add Multiple custom network setup options
- Complete template for CentOS
- Complete template for CBL-Mariner
In progress.
This project is licensed under the MIT License.