Platform 8 · Security & Audit Kits
Security Header and Policy Pack
built by Lars Holm
All levels 150 files 532 aboard
Open fare
€1–€100
Security & Audit Kits
Intermediate
Line KJ-131 Platform 8 · Security & Audit Kits
Server Hardening Playbooks for Ansible
Ansible playbooks that harden Ubuntu and Debian servers to a documented baseline in one run.
Rated 5.0 out of 5 from 1 review
158
builders
LH Maintained by Lars Holm
- Last updated October 2026
- English
- 55m of walkthroughs
- 29 files
What you get
4 items in the boxEvery bullet below is in the download, working, the moment your payment clears.
- One-run hardening for Ubuntu and Debian
- SSH, firewall, fail2ban and automatic updates
- Audit logging and file-integrity monitoring
- Drift reports for existing servers
What's in the box
4 parts · 29 files · 55m of walkthroughs
5 files with a 9m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
8 files with a 16m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
10 files with a 19m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
6 files with a 11m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
4 parts · 29 files
55m total length
You will need
Short list, and deliberately so. If you meet these you can start today.
- Ansible 2.15 or newer
- Servers you control
About this product
These playbooks bring a fresh Ubuntu or Debian server to a hardened baseline: SSH key-only access, a firewall with sensible defaults, automatic security updates, fail2ban, audit logging, kernel parameter hardening, file-integrity monitoring and a non-root deploy user.
Every task is tagged and documented with the reason it exists, roughly mapped to the CIS benchmark. A check mode reports drift on servers you already run, so you can adopt the baseline gradually without breaking anything.
Frequently asked questions
Still unsure about something? Write to our contact page and a human answers, usually the same working day.
The SSH role refuses to disable password login until it has verified that key login works for the deploy user.
Checkout is handled on our provider's secure payment page. The moment your payment clears we email your personal access link and access code to the address you used at checkout, and the same link appears in your account library. There is nothing to install and nothing to wait for.
Email within 14 days of your purchase, quote your order number, and we refund the full amount to your original payment method. No form to fill in and no questions about how much of the product you watched.
What builders say
Reviews are written by people who bought this product. We publish the critical ones too.
5.0
Rated 5.0 out of 5Product rating · 1 review
Rating distribution
- 5 stars 100%
- 4 stars 0%
- 3 stars 0%
- 2 stars 0%
- 1 star 0%
-
VHJul 2026
Viktor Hansen
Infrastructure engineer
Rated 5.0 out of 5Drift mode is brilliant
Ran check mode across our existing fleet first and fixed things gradually. The SSH safety check meant nobody got locked out.
Your maker
LH
Lars Holm
Go and Rust engineer with a security habit
- 2,427 builders aboard
- 11 products published
- 5.0 maker rating
- Go
- Rust
- PostgreSQL
- Application security
- Linux hardening
Lars started out in penetration testing and moved into backend engineering, so he writes Go services the way an attacker would read them. He maintains the Go API and Postgres tenancy modules and the whole Security line. His audit kits explain the reason behind every check, because a checklist nobody understands gets skipped.
€57
EUR
One-time payment · lifetime access