36 lines
1014 B
Bash
Executable File
36 lines
1014 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
echo "----- Switch to secure ssh conf ---------------------"
|
|
read -p 'Install the secure "sshd_config" file? [y/N]: ' secure_ssh
|
|
case $secure_ssh in
|
|
[Yy]* )
|
|
LOCATION=`dirname "$0"`
|
|
mkdir -p "/etc/ssh/sshd_config.d"
|
|
echo 'Backing up old config'
|
|
sudo mv "/etc/ssh/sshd_config" "/etc/ssh/sshd_config.backup"
|
|
echo 'Copying new config files'
|
|
sudo cp "${LOCATION}/conf/sshd_config.conf" "/etc/ssh/sshd_config.d/sshd_config.conf"
|
|
sudo cp "${LOCATION}/conf/include.conf" "/etc/ssh/sshd_config"
|
|
;;
|
|
* )
|
|
echo 'Skipping'
|
|
;;
|
|
esac
|
|
|
|
echo "----- Restart ssh now -------------------------------"
|
|
read -p 'Restart SSH to use updated config? [y/N]: ' restart_ssh
|
|
case $restart_ssh in
|
|
[Yy]* )
|
|
echo 'calling systemctl'
|
|
sudo systemctl restart ssh.service
|
|
;;
|
|
* )
|
|
echo 'Skipping'
|
|
;;
|
|
esac
|
|
|
|
echo 'REMEMBER TO TEST SSH:'
|
|
echo 'ENSURE ROOT LOGIN BLOCKED,'
|
|
echo 'ENSURE USER ENABLED.'
|
|
|