This commit is contained in:
2025-07-21 16:13:07 +02:00
parent d6c2e62d68
commit e67b5dc849

View File

@@ -13,7 +13,7 @@ useradd -g admins -m -r -c "System administrator" sysadmin
echo "%admins ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/admins echo "%admins ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/admins
mkdir -p /home/sysadmin/.ssh mkdir -p /home/sysadmin/.ssh
chmod 700 /home/sysadmin/.ssh chmod 700 /home/sysadmin/.ssh
curl -so /home/sysadmin/.ssh/authorized_keys $REPO/raw/master/post/ansible.pub curl -so /home/sysadmin/.ssh/authorized_keys $REPO/raw/branch/master/post/ansible.pub
chown -R sysadmin:admins /home/sysadmin/.ssh chown -R sysadmin:admins /home/sysadmin/.ssh
echo -e "${GREEN}Disable root user SSH access...${NOCOL}" echo -e "${GREEN}Disable root user SSH access...${NOCOL}"
@@ -21,8 +21,8 @@ sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config
sed -i 's/PermitRootLogin without-password/PermitRootLogin no/' /etc/ssh/sshd_config sed -i 's/PermitRootLogin without-password/PermitRootLogin no/' /etc/ssh/sshd_config
echo -e "${GREEN}Configuring and enabling default firewall...${NOCOL}" echo -e "${GREEN}Configuring and enabling default firewall...${NOCOL}"
curl -so /etc/iptables/iptables.rules $REPO/raw/master/post/iptables.rules curl -so /etc/iptables/iptables.rules $REPO/raw/branch/master/post/iptables.rules
curl -so /etc/iptables/ip6tables.rules $REPO/raw/master/post/ip6tables.rules curl -so /etc/iptables/ip6tables.rules $REPO/raw/branch/master/post/ip6tables.rules
systemctl enable iptables systemctl enable iptables
systemctl enable ip6tables systemctl enable ip6tables
@@ -36,7 +36,7 @@ echo "fastfetch" > /etc/profile.d/fastfetch.sh
chmod +x /etc/profile.d/fastfetch.sh chmod +x /etc/profile.d/fastfetch.sh
echo -e "${GREEN}Install deployment script...${NOCOL}" echo -e "${GREEN}Install deployment script...${NOCOL}"
curl -so /usr/local/bin/deploy https://git.xo.nl/marcel/deploy/raw/master/deploy.sh curl -so /usr/local/bin/deploy https://git.xo.nl/marcel/deploy/raw/branch/master/deploy.sh
chown root:root /usr/local/bin/deploy chown root:root /usr/local/bin/deploy
chmod ug+x /usr/local/bin/deploy chmod ug+x /usr/local/bin/deploy