Ansible playbook for hardening a Docker host

Hi,

I’ve been wanting to automate the server setup I usually do manually on fresh ubuntu server for a while now. Repetitive stuff like SSH hardening, Docker setup, firewall rules, fail2ban, etc. Figured it was time to just automate it instead of doing it by hand every time.

I came across guillaumebriday/kamal-ansible-manager and used it as a starting point, then built on top of it. Added more hardening mapped to CIS benchmark, tested with Molecule, cleaned things up to use fully-qualified collection names (FQCN) throughout, and wrote out proper docs along the way.

Repository: jezmn/ansible-hardened-docker-host

Still pretty new, so any feedback is welcome. Thanks for reading.

1 Like