I have got a small VPS running Ubuntu which (for the foreseeable future) will only host my own, static, website. The only services accessible from the outside will be SSH (only public key authentication allowed) and HTTP (probably nginx).
I am managing the configuration of the server via Puppet and would like to share that configuration via GitHub as an example to anyone interested. The Puppet configuration does not contain any passwords or similar sensitive information. It does however include for instance the firewall configuration (which is pretty basic), the username of a user that can use sudo, which packages are installed, etc.
I know that the less a potential intruder knows about the system, the better. But realistically, how much trouble would I put myself into by publishing the configuration?