35 lines
926 B
Bash
Executable File
35 lines
926 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
script_dir=$(dirname "$0")
|
|
|
|
# ----------------------------------------------------------
|
|
|
|
read -p 'Setup secure "sshd_config" file? [y/N]: ' response
|
|
case "${response}" in
|
|
[Yy]* )
|
|
mkdir -p "/etc/ssh/sshd_config.d"
|
|
sudo mv "/etc/ssh/sshd_config" "/etc/ssh/sshd_config.backup"
|
|
sudo cp "${script_dir}/config/sshd-sshd_config.conf" "/etc/ssh/sshd_config.d/sshd_config.conf"
|
|
sudo cp "${script_dir}/config/sshd-include.conf" "/etc/ssh/sshd_config"
|
|
;;
|
|
* )
|
|
echo 'Skipping'
|
|
;;
|
|
esac
|
|
echo ''
|
|
|
|
# ----------------------------------------------------------
|
|
|
|
read -p 'Restart SSH to use updated config? [y/N]: ' response
|
|
case "${response}" in
|
|
[Yy]* )
|
|
sudo systemctl restart ssh.service
|
|
echo -e "\e[33mremember to test ssh, ensure root login block, ensure user enaled"
|
|
;;
|
|
* )
|
|
echo 'Skipping'
|
|
;;
|
|
esac
|
|
echo ''
|
|
|