diff --git a/post/run.sh b/post/run.sh index fa900df..9e0af5d 100644 --- a/post/run.sh +++ b/post/run.sh @@ -8,7 +8,7 @@ useradd -g admins -m -r -c "System administrator" sysadmin echo "%admins ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/admins mkdir -p /home/sysadmin/.ssh chmod 700 /home/sysadmin/.ssh -curl -o /home/sysadmin/.ssh/authorized_keys $REPO/raw/master/post/ansible.pub +curl -so /home/sysadmin/.ssh/authorized_keys $REPO/raw/master/post/ansible.pub chown -R sysadmin:admins /home/sysadmin/.ssh echo "Disable root user SSH access..." @@ -16,8 +16,8 @@ sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config sed -i 's/PermitRootLogin without-password/PermitRootLogin no/' /etc/ssh/sshd_config echo "Configuring and enabling default firewall..." -curl -o /etc/iptables/iptables.rules $REPO/raw/master/post/iptables.rules -curl -o /etc/iptables/ip6tables.rules $REPO/raw/master/post/ip6tables.rules +curl -so /etc/iptables/iptables.rules $REPO/raw/master/post/iptables.rules +curl -so /etc/iptables/ip6tables.rules $REPO/raw/master/post/ip6tables.rules systemctl enable iptables systemctl enable ip6tables