added sshd config to essentials script
This commit is contained in:
137
debian/debian-essentials.sh
vendored
137
debian/debian-essentials.sh
vendored
@@ -257,10 +257,139 @@ if [[ -f /opt/cronicle/conf/config.json ]]
|
||||
fi
|
||||
|
||||
|
||||
# download sshd configuration test script
|
||||
rm /home/akanealw/debian-configure-sshd.sh > /dev/null 2>&1
|
||||
wget -qO /root/debian-configure-sshd.sh http://192.168.1.50/scripts/debian/debian-configure-sshd.sh
|
||||
chmod +x /root/debian-configure-sshd.sh
|
||||
# sshd config
|
||||
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak > /dev/null 2>&1
|
||||
isInFile=$(cat /etc/hostname | grep -c "proxmox")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
isInFile=$(cat /etc/ssh/sshd_config | grep -c "#PermitRootLogin prohibit-password")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
sed -i 's/PermitRootLogin no/#PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
|
||||
sed -i 's/PermitRootLogin yes/#PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
|
||||
sed -i 's/PermitRootLogin prohibit-password/#PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
|
||||
fi
|
||||
fi
|
||||
|
||||
isInFile=$(cat /etc/hostname | grep -c "proxmox")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
# isInFile=$(cat /etc/ssh/sshd_config | grep -c "#PasswordAuthentication no")
|
||||
# if [ $isInFile -eq 0 ]
|
||||
# then
|
||||
sed -i 's/#PasswordAuthentication no/PasswordAuthentication no/g' /etc/ssh/sshd_config
|
||||
sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
|
||||
sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
|
||||
# fi
|
||||
fi
|
||||
|
||||
|
||||
# authorized_keys akanealw
|
||||
cp /home/akanealw/.ssh/authorized_keys /home/akanealw/.ssh/authorized_keys.bak > /dev/null 2>&1
|
||||
isInFile=$(cat /home/akanealw/.ssh/authorized_keys | grep -c "winpc-akanealw")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKYj+eRQsvdLvrJNoqugb9A7iQT+BEPb6LI9BseyhWR winpc-akanealw" >> /home/akanealw/.ssh/authorized_keys
|
||||
chown akanealw:akanealw /home/akanealw/.ssh/*
|
||||
chmod 600 /home/akanealw/.ssh/*
|
||||
fi
|
||||
|
||||
isInFile=$(cat /home/akanealw/.ssh/authorized_keys | grep -c "server-akanealw")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGAiw0sQxxTg/zBm/Hz4LLjtiuGfefF2vogGkYcWox4S server-akanealw" >> /home/akanealw/.ssh/authorized_keys
|
||||
chown akanealw:akanealw /home/akanealw/.ssh/*
|
||||
chmod 600 /home/akanealw/.ssh/*
|
||||
fi
|
||||
|
||||
|
||||
# authorized_keys root
|
||||
cp /root/.ssh/authorized_keys /root/.ssh/authorized_keys.bak
|
||||
isInFile=$(cat /root/.ssh/authorized_keys | grep -c "winpc-root")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBI/kuy/SVCxShVBNtWtNREX9cpWrlsthV3z15ky+bPy winpc-root" >> /root/.ssh/authorized_keys
|
||||
chmod 600 /root/.ssh/authorized_keys
|
||||
fi
|
||||
|
||||
isInFile=$(cat /root/.ssh/authorized_keys | grep -c "server-root")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHWiw5lVzQIZiZc1SPphvHhdSpFl9UN6Xm4znFqq5xs4 server-root" >> /root/.ssh/authorized_keys
|
||||
chmod 600 /root/.ssh/authorized_keys
|
||||
fi
|
||||
|
||||
|
||||
# config /home/akanealw/.ssh/
|
||||
isInFile=$(cat /home/akanealw/.ssh/config | grep -c "*-root")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
cp /home/akanealw/.ssh/config /home/akanealw/.ssh/config.bak > /dev/null 2>&1
|
||||
mv /home/akanealw/.ssh/known_hosts /home/akanealw/.ssh/known_hosts.old > /dev/null 2>&1
|
||||
echo "" >> /home/akanealw/.ssh/config
|
||||
echo "" >> /home/akanealw/.ssh/config
|
||||
echo "Host *-root" >> /home/akanealw/.ssh/config
|
||||
echo "User root" >> /home/akanealw/.ssh/config
|
||||
echo "IdentityFile /root/.ssh/server-root" >> /home/akanealw/.ssh/config
|
||||
echo "" >> /home/akanealw/.ssh/config
|
||||
echo "Host *" >> /home/akanealw/.ssh/config
|
||||
echo "Port 22" >> /home/akanealw/.ssh/config
|
||||
echo "User akanealw" >> /home/akanealw/.ssh/config
|
||||
echo "IdentityFile /home/akanealw/.ssh/server-akanealw" >> /home/akanealw/.ssh/config
|
||||
chown akanealw:akanealw /home/akanealw/.ssh/*
|
||||
chmod 600 /home/akanealw/.ssh/*
|
||||
fi
|
||||
|
||||
|
||||
# config /root/.ssh/
|
||||
isInFile=$(cat /root/.ssh/config | grep -c "*-root")
|
||||
if [ $isInFile -eq 0 ]
|
||||
then
|
||||
cp /root/.ssh/config /root/.ssh/config.bak > /dev/null 2>&1
|
||||
mv /root/.ssh/known_hosts /root/.ssh/known_hosts.old > /dev/null 2>&1
|
||||
echo "" >> /root/.ssh/config
|
||||
echo "" >> /root/.ssh/config
|
||||
echo "Host *-root" >> /root/.ssh/config
|
||||
echo "User root" >> /root/.ssh/config
|
||||
echo "IdentityFile /root/.ssh/server-root" >> /root/.ssh/config
|
||||
echo "" >> /root/.ssh/config
|
||||
echo "Host *" >> /root/.ssh/config
|
||||
echo "Port 22" >> /root/.ssh/config
|
||||
echo "User akanealw" >> /root/.ssh/config
|
||||
echo "IdentityFile /home/akanealw/.ssh/server-akanealw" >> /root/.ssh/config
|
||||
chmod 600 /root/.ssh/*
|
||||
fi
|
||||
|
||||
|
||||
# server-akanealw
|
||||
if [[ ! -f /home/akanealw/.ssh/server-akanealw ]]
|
||||
then
|
||||
echo "-----BEGIN OPENSSH PRIVATE KEY-----" > /home/akanealw/.ssh/server-akanealw
|
||||
echo "b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW" >> /home/akanealw/.ssh/server-akanealw
|
||||
echo "QyNTUxOQAAACBgIsNLEMcU4P8wZvx8+Cy47Yrhn3nxdr6IBpGHFqMeEgAAAJgPgcu8D4HL" >> /home/akanealw/.ssh/server-akanealw
|
||||
echo "vAAAAAtzc2gtZWQyNTUxOQAAACBgIsNLEMcU4P8wZvx8+Cy47Yrhn3nxdr6IBpGHFqMeEg" >> /home/akanealw/.ssh/server-akanealw
|
||||
echo "AAAEDalS9Q+0KRMMqOXnie/d0uckbLIePYYY7DOqs8cJ7UF2Aiw0sQxxTg/zBm/Hz4LLjt" >> /home/akanealw/.ssh/server-akanealw
|
||||
echo "iuGfefF2vogGkYcWox4SAAAAD3NlcnZlci1ha2FuZWFsdwECAwQFBg==" >> /home/akanealw/.ssh/server-akanealw
|
||||
echo "-----END OPENSSH PRIVATE KEY-----" >> /home/akanealw/.ssh/server-akanealw
|
||||
chown akanealw:akanealw /home/akanealw/.ssh/*
|
||||
chmod 600 /home/akanealw/.ssh/*
|
||||
fi
|
||||
|
||||
# server-root
|
||||
if [[ ! -f /root/.ssh/server-root ]]
|
||||
then
|
||||
echo "-----BEGIN OPENSSH PRIVATE KEY-----" > /root/.ssh/server-root
|
||||
echo "b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW" >> /root/.ssh/server-root
|
||||
echo "QyNTUxOQAAACB1osOZVc0CGYmXNUj6Ybx4XUqRZfVDel5uM5xaqucbOAAAAJAnxfYyJ8X2" >> /root/.ssh/server-root
|
||||
echo "MgAAAAtzc2gtZWQyNTUxOQAAACB1osOZVc0CGYmXNUj6Ybx4XUqRZfVDel5uM5xaqucbOA" >> /root/.ssh/server-root
|
||||
echo "AAAEBUjm9GcUvXzKnpiw0aYd+Ca7+LAWuq0u6l0FjPQyQjd3Wiw5lVzQIZiZc1SPphvHhd" >> /root/.ssh/server-root
|
||||
echo "SpFl9UN6Xm4znFqq5xs4AAAAC3NlcnZlci1yb290AQI=" >> /root/.ssh/server-root
|
||||
echo "-----END OPENSSH PRIVATE KEY-----" >> /root/.ssh/server-root
|
||||
chmod 600 /root/.ssh/*
|
||||
fi
|
||||
|
||||
# restart sshd
|
||||
systemctl restart sshd
|
||||
|
||||
|
||||
# lock root
|
||||
|
||||
Reference in New Issue
Block a user