Community infrastructure patterns

Find and share reusable infrastructure automation playbooks.

Prowl Infra Hub publishes only verified templates. Contributors submit playbooks through pull requests, and templates become visible only after maintainer approval.

Explore verified playbooks Submit through PR

ssh-hardening.ymlverified

name: ssh-hardening
tool: ansible
risk_level: medium
playbook: |
  - hosts: "{{ inventory_group }}"
    become: true
    tasks:
      - name: Disable root login
        lineinfile:
          path: /etc/ssh/sshd_config
          regexp: "^PermitRootLogin"
          line: "PermitRootLogin no"

Curated Ansible playbooks, ready for your infrastructure.

Verified playbooks

Categories covered

Total downloads

Featured

Curated community playbooks

Hand-picked templates spanning security, provisioning, monitoring, and more. Each one is verified and ready to adapt for your infrastructure.

VerifiedSchema Validated

Rolling OS Update

Rolling OS package updates with health checks between batches

ansiblemedium riskNew

Patching5 tasksdebianUpdated May 21, 2026

Download

VerifiedSchema Validated

SSH Hardening

SSH hardening with key-only auth, root login disabled, and fail2ban

ansiblemedium riskNew

Security7 tasksdebianUpdated May 21, 2026

SOC2CIS

Download

VerifiedSchema Validated

Install Node Exporter

Deploy Prometheus node_exporter for system metrics collection

ansiblelow riskNew

Monitoring7 tasksUpdated May 21, 2026

Download

VerifiedSchema Validated

AWS VPC Setup

Provision an AWS VPC with public/private subnets, NAT gateway, and route tables

terraformmedium riskawsNew

Provisioning0 tasksUpdated May 21, 2026

Download

VerifiedSchema Validated

K8S Namespace Setup

Kubernetes namespace with resource quotas, limit ranges, and network policies

k8slow riskNew

Containers0 tasksUpdated May 21, 2026

Download

VerifiedSchema Validated

Database Backup S3

Backup PostgreSQL database and upload to AWS S3

ansiblemedium riskawsNew

Backup6 tasksUpdated May 21, 2026

SOC2HIPAA

Download

Browse all 38 verified playbooks

Contribute

Submit a playbook through pull request

Submission opens GitHub with a prefilled playbook file. Only merged PRs are published, which keeps the live catalog verified-only.

Verified-only publishing

Templates become visible only after PR review and maintainer merge.

Security review

Checks flag dangerous commands, credential patterns, hardcoded IPs, and injection attempts.

Risk-level classification

Every playbook is tagged with a risk level so teams can assess impact before deployment.