Changelog

9.0.0 (2023-11-16)

Breaking changes:

make it possible to configure more then yes and no for PermitTunnel #715 [ssh_hardening] (rndmh3ro)
add role argument spec for os, ssh, mysql #687 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

Implemented enhancements:

Create role documentation with Automated-Ansible-Role-Documentation #694
Minimize access user paths should be fully configurable #689
Add support for Debian 12 #672
add testing and support for current versions of Fedora and FreeBSD #709 [os_hardening] [ssh_hardening] (schurzi)
feat: workflow for roles readme #705 [ssh_hardening] (Nemental)
do not try to drop roles in mysql hardening #649 [mysql_hardening] (rndmh3ro)

Fixed bugs:

nginx conf.d directory is missing on Rocky Linux 8 #707
Default value of ssh_client_alive_interval is inconsistent with what documentation says #701
[devsec.hardening.os_hardening : restart-auditd] fails #698
sshd_hardening role cannot be used to build system images #697
Error: No file was found when using first_found on Ubuntu 20.04 #676
PUBLIC-role breaks mysql-hardening #648
Error deploying the playbook #630
boolean variable inconcistency ? #330
Gather facts when os_hardening role is executed with tags #708 [os_hardening] (schurzi)

Closed issues:

Merged pull requests:

update status badges in README #714 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (schurzi)
fix CI test for os_hardening #711 [os_hardening] (schurzi)
fix nginx CI tests #710 [nginx_hardening] (schurzi)
fix: roles-readme action default value #706 [ssh_hardening] (Nemental)
fix some wrong defaults and types in the readmes #703 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)
update links to new Ansible Galaxy #702 [nginx_hardening] (schurzi)
Fix typo in login.defs.j2 #700 [os_hardening] (nejch)
chore(deps): update actions/checkout action to v4 #696 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (renovate[bot])
test debian12 on VM #695 (rndmh3ro)
fix descriptions in readme #693 [os_hardening] (rndmh3ro)
feat: customize user paths default #692 [os_hardening] (S0obi)
disable PAM tests #691 [os_hardening] (rndmh3ro)