This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
This Ansible role provides security configuration for MySQL.