https://github.com/dev-sec/ansible-collection-hardening/tree/master
This collection provides battle tested hardening for:
Linux operating systems:
CentOS 9
Rocky Linux 8/9
Debian 11/12
Ubuntu 20.04/22.04/24.04
Amazon Linux (some roles supported)
Arch Linux (some roles supported)
Fedora 39/40 (some roles supported)
Suse Tumbleweed (some roles supported)
MySQL
MariaDB >= 5.5.65, >= 10.1.45, >= 10.3.17
MySQL >= 5.7.31, >= 8.0.3
Nginx 1.0.16 or later
OpenSSH 5.3 and later