Issues

• bootstrap.sh exits after the first script under set -e: ((PASS++)) returns 1 when PASS is 0

  6kdave/linux-security#103 · Filter by author 6kdave opened on Sep 25, 2026

• feat: Rocky Linux / AlmaLinux (RHEL-based) support

  area: devopspriority: mediumtype: feature
  6kdave/linux-security#101 · Filter by author 6kdave opened on Mar 9, 2026

• Security posture trend tracking across audit runs (per-server JSON history)

  auditmulti-serverphase-3
  6kdave/linux-security#95 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• docs: Immutable infrastructure migration guide using VPS snapshots or Packer

  docsphase-3
  6kdave/linux-security#94 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Password policy enforcement for local accounts (PAM pam_pwquality)

  compliancehardeningphase-3
  6kdave/linux-security#93 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• docs/CLOUD_INIT_PATTERNS.md — cloud-init user-data bootstrap templates

  automationdocsphase-3
  6kdave/linux-security#92 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Automated OpenSSH CVE version check and alert

  auditmonitoringphase-3
  6kdave/linux-security#91 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Certificate Transparency log monitoring for unexpected cert issuance

  hardeningmonitoringphase-3
  6kdave/linux-security#90 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• scripts/hardening/09-docker-hardening.sh — Docker security baseline

  hardeningphase-3
  6kdave/linux-security#89 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Terraform modules for Hetzner Cloud and Vultr (provision + bootstrap)

  automationphase-3
  6kdave/linux-security#88 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Automated canary file integrity check in sensitive directories

  hardeningmonitoringphase-3
  6kdave/linux-security#87 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Honeypot port configuration for early-warning targeted scan detection

  hardeningmonitoringphase-3
  6kdave/linux-security#86 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Geo-blocking script using MaxMind GeoLite2 and iptables/Apache

  hardeningphase-3
  6kdave/linux-security#85 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• IPv6 hardening: UFW IPv6 rules and sysctl privacy extensions

  hardeningphase-3
  6kdave/linux-security#84 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• WireGuard VPN setup for admin-access-over-VPN-only configuration

  hardeningphase-3
  6kdave/linux-security#83 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Prometheus node_exporter installation and UFW integration

  monitoringphase-3
  6kdave/linux-security#82 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Ansible playbook equivalents for all hardening scripts

  automationmulti-serverphase-3
  6kdave/linux-security#81 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• NIST SP 800-53 control mapping document

  compliancedocsphase-3
  6kdave/linux-security#80 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Secrets scanning pre-commit hook (gitleaks / custom pattern check)

  automationphase-3
  6kdave/linux-security#79 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 3 — Advanced

• Automated nightly backup verification (age, size, and integrity check)

  automationmonitoringphase-2
  6kdave/linux-security#78 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements

• DigitalOcean provisioning integration via doctl

  automationphase-2
  6kdave/linux-security#77 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements

• scripts/hardening/08-redis-hardening.sh — Redis security baseline

  hardeningphase-2
  6kdave/linux-security#76 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements

• Configurable tiered ban durations in fail2ban (short/long/permanent)

  hardeningphase-2
  6kdave/linux-security#73 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements

• Server-to-server posture comparison script

  auditmulti-serverphase-2
  6kdave/linux-security#70 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements

• GoAccess real-time WebSocket mode setup and documentation

  docsmonitoringphase-2
  6kdave/linux-security#68 · Filter by author 6kdave opened on Mar 8, 2026 · Phase 2 — Enhancements