marcel/archlinux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed nocol

Browse Source
This commit is contained in:
Marcel Stangenberger 2025-04-06 11:14:16 +00:00
parent 98c845c224
commit 2f7090a43d
1 changed files with 7 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
post/run.sh
View File

@ -3,10 +3,9 @@
REPO=https://git.xoservice.nl/marcel/archlinux
GREEN='\033[0;32m'
RED='\033[0;31m'
NOCOL='\033[om'
NOCOL='\033[0m'
echo -e "${GREEN}Setting remote control requirements..."
echo -e ${NOCOL}
echo -e "${GREEN}Setting remote control requirements...${NOCOL}"
groupadd admins
useradd -g admins -m -r -c "System administrator" sysadmin
echo "%admins ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/admins
@ -15,30 +14,25 @@ chmod 700 /home/sysadmin/.ssh
curl -so /home/sysadmin/.ssh/authorized_keys $REPO/raw/master/post/ansible.pub
chown -R sysadmin:admins /home/sysadmin/.ssh
echo -e "${GREEN}Disable root user SSH access..."
echo -e ${NOCOL}
echo -e "${GREEN}Disable root user SSH access...${NOCOL}"
sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config
sed -i 's/PermitRootLogin without-password/PermitRootLogin no/' /etc/ssh/sshd_config
echo -e "${GREEN}Configuring and enabling default firewall..."
echo -e ${NOCOL}
echo -e "${GREEN}Configuring and enabling default firewall...${NOCOL}"
curl -so /etc/iptables/iptables.rules $REPO/raw/master/post/iptables.rules
curl -so /etc/iptables/ip6tables.rules $REPO/raw/master/post/ip6tables.rules
systemctl enable iptables
systemctl enable ip6tables
echo -e "${GREEN}Install minimal required packages..."
echo -e ${NOCOL}
echo -e "${GREEN}Install minimal required packages...${NOCOL}"
pacman --noconfirm -S iftop htop bash-completion iotop lsof screen neofetch neovim man-db
ln -s /usr/bin/nvim /usr/bin/vi
echo -e "${GREEN}Setup motd default..."
echo -e ${NOCOL}
echo -e "${GREEN}Setup motd default...${NOCOL}"
echo "" > /etc/motd
echo "neofetch" >> /etc/profile.d/neofetch.sh
chmod +x /etc/profile.d/neofetch.sh
echo -e "${RED}All done, reboot in 10 seconds..."
echo -e ${NOCOL}
echo -e "${RED}All done, reboot in 10 seconds...${NOCOL}"
sleep 10
reboot