Modular Linux hardening framework up to 90 Lynis hardening index across Debian, Ubuntu, Rocky, Alma, Fedora. LUKS full-disk & data-at-rest encryption, modern SSH crypto policy, kernel boot mitigations, fail2ban, auditd, nftables. Automated Hetzner test matrix, remote SSH deploy. Production-safe, auditable, reversible.
-
Updated
Jul 2, 2026 - Shell