brainstate

discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens

Sanexxxx777/server-hardening-playbook

Practical Linux server hardening — every item is failure → fix → verify. SSH, firewall, service binding, secrets, DB auth, and more.

Shell★ 17MITGitHub ↗

History and source changes · Reports and owner responses · Compare

Similar

  1. ranjith-src/vps-harden

    Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.

    Shell★ 45MITGitHub ↗

    Why this match

    topics devops, firewall, infosec

  2. drduh/macOS-Security-and-Privacy-Guide

    Community guide to securing and improving privacy on macOS.

    Shell★ 22.6kMITGitHub ↗

    Why this match

    topics hardening, infosec, opsec

  3. rockballslab/vps-secure

    🛡️ VPS-SECURE is the only script that turns a bare VPS into an operational fortress — honeypot, collaborative IPS, real-time dashboard, Telegram alerts — in 15 minutes and 1 command, with zero Linux expertise required. 🚀⚡

    HTML★ 28GitHub ↗

    Why this match

    topics devops, hardening, linux; language differs: Shell → HTML

  4. coder/httpjail

    HTTP(s) request filter for processes

    Rust★ 960CC0-1.0GitHub ↗

    Why this match

    topics firewall, security; language differs: Shell → Rust; license differs: MIT → CC0-1.0

  5. pythops/oryx

    🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

    Rust★ 2.6kGPL-3.0GitHub ↗

    Why this match

    topics firewall, linux, security; language differs: Shell → Rust; license differs: MIT → GPL-3.0

  6. hectorm/cardea

    Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

    Go★ 37EUPL-1.2GitHub ↗

    Why this match

    topics firewall, security, ssh; language differs: Shell → Go; license differs: MIT → EUPL-1.2

  7. awesome-foss/awesome-sysadmin

    A curated list of amazingly awesome open-source sysadmin resources.

    ★ 35.6kGitHub ↗

    Why this match

    topics devops, self-hosted, sysadmin

  8. jp1337/easywall

    Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock yourself out. Debian & Docker install.

    Go★ 18GPL-3.0GitHub ↗

    Why this match

    topics firewall, linux, security; language differs: Shell → Go; license differs: MIT → GPL-3.0