Harden your system
Security hardening involves poorly configured systems, from a security point of view, being identified and made to conform to security standards. This applies to the different layers of a system such as the network, where it’ll enable the firewall. On the software level, hardening involves removing packages with known issues, allowing only signed packages to be installed and so on.
Ansible is a popular hardening tool that does all of the above and more. Note, however, that you’ll still need to update packages and install security updates manually. To install Ansible and run: pip install ansible ansible-galaxy install git+https://git.openstack.org/openstack/ansible-hardening