minor readme fixes
Signed-off-by: Sebastian Gumprich <[email protected]>
This commit is contained in:
1 parent
c94d973527
commit
d857830979
6 files changed
+11
-25
No files matched your search
@@ -24,7 +24,7 @@ It configures:
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.mysql_hardening
|
||||
- devsec.hardening.mysql_hardening
|
||||
```
|
||||
|
||||
This role expects an existing installation of MySQL or MariaDB. Please ensure that the following variables are set accordingly:
|
||||
|
||||
@@ -83,7 +83,7 @@ It works with the following nginx-roles, including, but not limited to:
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.nginx_hardening
|
||||
- devsec.hardening.nginx_hardening
|
||||
```
|
||||
|
||||
[nginx_client_body_buffer_size]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_body_buffer_size
|
||||
|
||||
@@ -48,7 +48,7 @@ If you're using Docker / Kubernetes+Docker you'll need to override the ipv4 ip f
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.os_hardening
|
||||
- devsec.hardening.os_hardening
|
||||
vars:
|
||||
sysctl_overwrite:
|
||||
# Enable IPv4 traffic forwarding.
|
||||
@@ -64,7 +64,7 @@ We are setting this sysctl to a default of `32`, some systems only support small
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.os_hardening
|
||||
- devsec.hardening.os_hardening
|
||||
vars:
|
||||
sysctl_overwrite:
|
||||
vm.mmap_rnd_bits: 16
|
||||
@@ -204,7 +204,7 @@ To prevent some of the filesystems from being disabled, add them to the `os_file
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.os_hardening
|
||||
- devsec.hardening.os_hardening
|
||||
```
|
||||
|
||||
## Changing sysctl variables
|
||||
@@ -217,7 +217,7 @@ So for example if you want to change the IPv4 traffic forwarding variable to `1`
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.os_hardening
|
||||
- devsec.hardening.os_hardening
|
||||
vars:
|
||||
sysctl_overwrite:
|
||||
# Enable IPv4 traffic forwarding.
|
||||
|
||||
@@ -235,7 +235,7 @@ Warning: This role disables root-login on the target server! Please make sure yo
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.ssh_hardening
|
||||
- devsec.hardening.ssh_hardening
|
||||
```
|
||||
|
||||
## Configuring settings not listed in role-variables
|
||||
@@ -249,7 +249,7 @@ Example playbook:
|
||||
collections:
|
||||
- devsec.hardening
|
||||
roles:
|
||||
- devsec.ssh_hardening
|
||||
- devsec.hardening.ssh_hardening
|
||||
vars:
|
||||
ssh_custom_options:
|
||||
- "Include /etc/ssh/ssh_config.d/*"
|
||||
|
||||
Reference in new issue
Block a user