From 65797069efd496ff17bae9425c034e05983e30af Mon Sep 17 00:00:00 2001 From: 5thsymphony <88965885+5thsymphony@users.noreply.github.com> Date: Sat, 13 Nov 2021 13:08:26 +0000 Subject: [PATCH] Update README.md to make clear security hardening is not done for you. (#140) Co-authored-by: Devin Buhl --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 40ad0a4d..5a25bf24 100644 --- a/README.md +++ b/README.md @@ -193,6 +193,8 @@ In order to use Terraform and `cert-manager` with the Cloudflare DNS challenge y :round_pushpin: Here we will be running a Ansible Playbook to prepare Ubuntu for running a Kubernetes cluster. +:round_pushpin: Nodes are not security hardened by default, you can do this with [dev-sec/ansible-collection-hardening](https://github.com/dev-sec/ansible-collection-hardening) or something similar. + 1. Ensure you are able to SSH into you nodes from your workstation with using your private ssh key. This is how Ansible is able to connect to your remote nodes. 2. Install the deps by running `task ansible:deps`