[nicolast]

There's https://github.com/openstack/ansible-hardening and https://github.com/dev-sec/ansible-os-hardening