there are some pretty solid ansible linux hardening roles out there too