更新时间:2021-07-02 22:00:47
封面
版权信息
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Why subscribe?
Customer Feedback
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Downloading the color images of this book
Errata
Piracy
Questions
Introduction to Ansible Playbooks and Roles
Ansible terms to keep in mind
Playbooks
Ansible modules
YAML syntax for writing Ansible playbooks
Ansible roles
Templates with Jinja2
Jinja templating examples
Conditional example
Loops example
LAMP stack playbook example – combining all the concepts
Summary
Ansible Tower Jenkins and Other Automation Tools
Scheduling tools to enable the next abstraction of automation
Getting up and running
Setting up Ansible Tower
Setting up Jenkins
Setting up Rundeck
Security automation use cases
Adding playbooks
Ansible Tower configuration
Jenkins Ansible integration configuration
Rundeck configuration
Authentication and data security
RBAC for Ansible Tower
TLS/SSL for Ansible Tower
Encryption and data security for Ansible Tower
RBAC for Jenkins
TLS/SSL for Jenkins
Encryption and data security for Jenkins
RBAC for Rundeck
HTTP/TLS for Rundeck
Encryption and data security for Rundeck
Output of the playbooks
Report management for Ansible Tower
Report management for Jenkins
Report management for Rundeck
Scheduling of jobs
Alerting notifications and webhooks
Setting Up a Hardened WordPress with Encrypted Automated Backups
CLI for WordPress
Why Ansible for this setup?
A complete WordPress installation step-by-step
Setting up nginx web server
Setting up prerequisites
Setting up MySQL database
Installing PHP for WordPress setup
Installing WordPress using WP-CLI
Hardening SSH service
Hardening a database service
Hardening nginx
Hardening WordPress
Hardening a host firewall service
Setting up automated encrypted backups in AWS S3
Executing playbook against an Ubuntu 16.04 server using Ansible Tower
Secure automated the WordPress updates
Scheduling via Ansible Tower for daily updates
Setting up Apache2 web server
Enabling TLS/SSL with Let's Encrypt
What if you don't want to roll your own? The Trellis stack
Why would we use Trellis and when is it a good idea to use it?
WordPress on Windows
How to enable WinRM in Windows
Running Ansible against a Windows server
Installing IIS server using playbook
Log Monitoring and Serverless Automated Defense (Elastic Stack in AWS)
Introduction to Elastic Stack
Elasticsearch
Logstash
Kibana
Beats
Why should we use Elastic Stack for security monitoring and alerting?
Prerequisites for setting up Elastic Stack
Setting up the Elastic Stack
Logstash integrations
ElastAlert
Installing Elasticsearch