This puppet module provides numerous security-related configurations, providing all-round base protection. - View it on GitHub