Stop Leaving Your Servers Open: Hardening Linux in 5 Minutes with Ansible

Muhammad Kamran Kabeer — Sat, 11 Apr 2026 04:40:31 +0000

Hello, World! I’m Muhammad Kamran Kabeer.

As an IT Instructor and the founder of MK EduOps Solutions, I often see students and small businesses focus on "getting things to work" while completely ignoring "getting things secured."Today, I’m sharing Lab 1 from my new series: The Hardened Gateway. We will use Ansible to automate the security of a Linux server on a Dell Latitude E7440 (or any Ubuntu/Debian machine).

🛡️ Why "Default Deny"?
Most people try to block "bad" ports. The professional way is to deny everything and only open what you need. This is the "Zero-Trust" mindset.

🛠️ The Automation Code
Here is the Ansible block I use to secure my lab environments:

YAML

name: Lab 1 - The Hardened Gateway
hosts: localhost
become: yes
tasks:
- name: Ensure UFW is installed apt: { name: ufw, state: present }
- name: Set Default Policies to DENY community.general.ufw: { state: enabled, policy: deny, direction: incoming }
- name: Allow Essential Traffic community.general.ufw: { rule: allow, port: "{{ item }}", proto: tcp } loop: ['22', '80', '443', '81'] 🚀 The Result Running this ensures that only SSH and Web traffic can enter. Everything else—unsecured databases, internal APIs, or forgotten services—is hidden from the world.

Check out the full lab repository here:https://github.com/muhammadkamrankabeer-oss/MK-EduOps-Labs

How I Automated a Self-Healing WordPress Lab using Ansible & Docker

Muhammad Kamran Kabeer — Thu, 09 Apr 2026 16:21:08 +0000

The Challenge

As an IT educator, I wanted a lab environment that was stable, professional, and "self-healing." If a student (or a bug) crashes the site, I want it back up in seconds without manual work.
The Solution

I built a stack on my Dell Latitude E7440 using:

Vagrant & Debian: To create a clean, isolated sandbox.

Ansible: To automate the configuration (Infrastructure as Code).

Docker: To run WordPress and MariaDB.

Nginx Proxy Manager: To give it a professional URL (http://wordpress.test) instead of messy IP addresses.

Why this matters

By using Docker's restart_policy: always, if the WordPress container fails, the system "heals" itself immediately.

[INSERT YOUR TWO SCREENSHOTS HERE: NPM Dashboard and WordPress Welcome Page]
Work with me!

I am a professional educator and DevOps practitioner. If you need:

Technical Writing: I can turn your complex code into clear tutorials.

Lab Setup: I can help you automate your teaching environments.

Feel free to reach out here or on LinkedIn!

DEV Community: Muhammad Kamran Kabeer

Stop Leaving Your Servers Open: Hardening Linux in 5 Minutes with Ansible

How I Automated a Self-Healing WordPress Lab using Ansible & Docker