Security Automation with Ansible 2

Hardening nginx 

Here, we can start looking at things like disabling server tokens to not display version information, adding headers like X-XSS-Protection, and many other configuration tweaks. Most of these changes are done via configuration changes, and Ansible allows us to version and control and automate these changes based on user requirements:

• The nginx server version information can be blocked by adding the server_tokens off; value to the configuration
• add_header X-XSS-Protection "1; mode=block"; will enable the cross-site scripting (XSS) filter
• SSLv3 can be disabled by adding  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
• This list can be pretty large, based on the use case and scenario:

The following code snippet contains nginx configuration ...