# Use case document
[nginx-mutual-ssl-proxy-tcp-udp](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/tls/nginx-mutual-ssl-proxy-tcp-udp.md)  

# How to use harbian-audit to audit and apply 

## Server node 
```
# iptables-restore iptables_ufw-4-server.cfg 
# bash bin/hardening.sh --audit-all 
```
This is set special service to exception(6.2 6.3 6.10)
```
# bash bin/hardening.sh --set-hardening-level 5 --allow-service dns,http,cups
# bash bin/hardening.sh --audit-all 
# bash bin/hardening.sh --apply
```

## Client node 
```
# iptables-restore iptables_ufw-4-client.cfg
# bash bin/hardening.sh --audit-all 
```
This is set special service to exception(6.10)
```
# bash bin/hardening.sh --set-hardening-level 5 --allow-service http 
# bash bin/hardening.sh --audit-all
# bash bin/hardening.sh --apply
```