Tempra Hub

Community hardening modules for Tempra.

Structure

modules/
├── ssh/              # SSH server hardening
├── firewall/         # Firewall (UFW/nftables) setup
└── fail2ban/         # Fail2ban intrusion prevention

Module Format

Each module is a TOML file. See Module Format for the full schema.

Contributing

1. Create a TOML file under modules/<category>/<name>.toml
2. Follow the module schema — every field is validated at load time
3. Reference the CIS benchmark or security standard you're implementing
4. Test that tempra plan correctly picks up your module
5. Submit a PR with the module file

Available Modules

Module	Category	Severity	Standards
sshd_hardening	SSH	Critical	CIS 5.2
basic_firewall	Firewall	Critical	CIS 3.5
fail2ban_setup	Fail2ban	High	CIS 5.2, NIST AC-7