Ansible Collection – devsec.hardening
https://github.com/dev-sec/ansible-collection-hardening/tree/master This collection provides battle tested hardening for: Linux operating systems:CentOS 9Rocky Linux 8/9Debian 11/12Ubuntu 20.04/22.04/24.04Amazon Linux (some roles supported)Arch Linux (some roles supported)Fedora 39/40 (some roles supported)Suse Tumbleweed (some roles supported)MySQLMariaDB >= 5.5.65, >= 10.1.45, >= 10.3.17MySQL >= 5.7.31, >= 8.0.3Nginx 1.0.16 or laterOpenSSH 5.3 and later