This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
Miscellaneous Linux security hardening settings for Kicksecure and derivatives
Network-first tuning for Debian/Ubuntu VPS: reversible BBR + fq, BDP-aware TCP buffers, diagnostics and budgeted measurement