minor readme fixes

Signed-off-by: Sebastian Gumprich <[email protected]>
This commit is contained in:
Sebastian Gumprich committed 2020-11-09 20:49:07 +01:00
1 parent c94d973527
commit d857830979
6 files changed
+11 -25

No files matched your search

+1 -1
View File
@@ -24,7 +24,7 @@ It configures:
collections:
- devsec.hardening
roles:
- devsec.mysql_hardening
- devsec.hardening.mysql_hardening
```
This role expects an existing installation of MySQL or MariaDB. Please ensure that the following variables are set accordingly:
+1 -1
View File
@@ -83,7 +83,7 @@ It works with the following nginx-roles, including, but not limited to:
collections:
- devsec.hardening
roles:
- devsec.nginx_hardening
- devsec.hardening.nginx_hardening
```
[nginx_client_body_buffer_size]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_body_buffer_size
+4 -4
View File
@@ -48,7 +48,7 @@ If you're using Docker / Kubernetes+Docker you'll need to override the ipv4 ip f
collections:
- devsec.hardening
roles:
- devsec.os_hardening
- devsec.hardening.os_hardening
vars:
sysctl_overwrite:
# Enable IPv4 traffic forwarding.
@@ -64,7 +64,7 @@ We are setting this sysctl to a default of `32`, some systems only support small
collections:
- devsec.hardening
roles:
- devsec.os_hardening
- devsec.hardening.os_hardening
vars:
sysctl_overwrite:
vm.mmap_rnd_bits: 16
@@ -204,7 +204,7 @@ To prevent some of the filesystems from being disabled, add them to the `os_file
collections:
- devsec.hardening
roles:
- devsec.os_hardening
- devsec.hardening.os_hardening
```
## Changing sysctl variables
@@ -217,7 +217,7 @@ So for example if you want to change the IPv4 traffic forwarding variable to `1`
collections:
- devsec.hardening
roles:
- devsec.os_hardening
- devsec.hardening.os_hardening
vars:
sysctl_overwrite:
# Enable IPv4 traffic forwarding.
+2 -2
View File
@@ -235,7 +235,7 @@ Warning: This role disables root-login on the target server! Please make sure yo
collections:
- devsec.hardening
roles:
- devsec.ssh_hardening
- devsec.hardening.ssh_hardening
```
## Configuring settings not listed in role-variables
@@ -249,7 +249,7 @@ Example playbook:
collections:
- devsec.hardening
roles:
- devsec.ssh_hardening
- devsec.hardening.ssh_hardening
vars:
ssh_custom_options:
- "Include /etc/ssh/ssh_config.d/*"