Tips for securing a Linux box

I typically run an Ansible Hardening Playbook on any new Linux installation. After that, there are a few more things I do. For SSH, I'll make sure password authentication is disabled root user is denied no X11 forwarding no keyboard-interactive auth is enabled restrict SSH to a specific username If it's a VM, I'll also make sure I allow only my IP access to port 22. I also typically install…