Harden PAM on Linux: pwquality, faillock and MFA (with Ansible + Molecule)
From manual config to idempotent IaC — covering RHEL/Rocky/Alma and Debian/Ubuntu
Series
Linux Hardening in Production
Practical guides for hardening Linux systems in real production environments. Covers PAM, SSH, sudo, auditd, SELinux, and automation with Ansible — tested on RHEL/Rocky and Debian/Ubuntu.