Ansible role for hardening Ubuntu servers. Also in Ansible Galaxy.