Ansible 101 - Episode 9 - First 5 min server security with Ansible

Подробнее о видео

Jeff Geerling (geerlingguy) explores Linux server security configuration using Ansible, following examples in chapter 10 of Ansible for DevOps.

Ansible for DevOps: 

Support Jeff on GitHub: 
Support Jeff on Patreon: 

Contents:

00:00:00 - Start
00:00:35 - Intro
00:04:26 - Questions from last episode
00:07:42 - Linux security setup with Ansible
00:09:50 - 9 Basic security measures
00:12:54 - Use secure encrypted communications
00:16:10 - History of SSH (rlogin, telnet)
00:19:38 - Securing SSH
00:23:50 - Ansible SSH security playbook
00:37:29 - Managing users and sudoers
00:43:40 - Remove unused apps
00:46:09 - Principle of least privilege
00:47:30 - POSIX file permissions
00:51:00 - Automatic updates with Ansible
00:54:59 - Configuring a firewall with Ansible
00:59:40 - Oops - locked myself out
01:00:37 - Security role on Galaxy
01:01:52 - Other security concerns
01:03:16 - Outtro