--- name: server-hardening-mastery description: 'Production server hardening — SSH, fail2ban, UFW/iptables, auditd, kernel tuning, intrusion detection, and compliance' version: 1.0.0 category: devops tags: [security, hardening, ssh, fail2ban, firewal

| Kind | What it is | How to work | |---|---|---| | `scratch` | Fresh tmp dir, yours alone | Read/write freely; it gets GC'd when the task is archived. | | `dir:` | Shared persistent directory | Other runs will read what you write. Treat it lik