server-bootstrap-cookbook

Recipes for server bootstrapping.

(RSpec + Serverspec tests included)

Supported Platforms

supports 'ubuntu', '= 12.04'

supports 'centos', '>= 5.3'

supports 'redhat', '>= 5.3'

Other distro may work but isn't tested.

No custom attributes. (Wrapper cookbook)

Default values of dependent cookbooks:

default['system']['timezone'] = 'America/Sao_Paulo'

default['ntp']['servers'] = ['a.ntp.br', 'b.ntp.br', 'c.ntp.br', 'a.st1.ntp.br', 'b.st1.ntp.br', 'c.st1.ntp.br', 'd.st1.ntp.br']

default['openssh']['server']['allow_agent_forwarding'] = 'no'

default['openssh']['server']['allow_tcp_forwarding'] = 'no'

default['openssh']['server']['client_alive_count_max'] = '0'

default['openssh']['server']['client_alive_interval'] = '600'

default['openssh']['server']['ignore_user_known_hosts'] = 'yes'

default['openssh']['server']['login_grace_time'] = '30s'

default['openssh']['server']['password_authentication'] = 'no'

default['openssh']['server']['permit_root_login'] = 'no'

default['openssh']['server']['rsa_authentication'] = 'no'

Include all or necessary recipes:

recipe 'server-bootstrap::hosts-file', 'Add node.hostname to /etc/hosts file'

recipe 'server-bootstrap::adjust-clock', 'Set timezone and ntp pool'

recipe 'server-bootstrap::ssh-hardening', 'OpenSSH hardening'

Author:: Roberto Moutinho (robertomoutinho@gmail.com)