29 lines
903 B
Bash
Executable file
29 lines
903 B
Bash
Executable file
apt update
|
|
apt upgrade
|
|
|
|
idk="$(which sudo)"
|
|
if [[ -z "$idk" ]]; then
|
|
echo 'alias sudo=""' >> ~/.bashrc
|
|
fi
|
|
|
|
CONFIG_FILE="/etc/ssh/sshd_config"
|
|
|
|
# Upraví konfiguraci SSH pro povolení pouze přihlašování pomocí klíčů
|
|
sed -i 's/^#\?\(PasswordAuthentication\) .*/\1 no/' "$CONFIG_FILE"
|
|
sed -i 's/^#\?\(PermitRootLogin\) .*/\1 prohibit-password/' "$CONFIG_FILE"
|
|
sed -i 's/^#\?\(PubkeyAuthentication\) .*/\1 yes/' "$CONFIG_FILE"
|
|
|
|
# Restart SSH, aby se změny projevily
|
|
systemctl restart sshd
|
|
|
|
echo "SSH je nyní nastaveno pouze pro přihlašování pomocí klíčů."
|
|
|
|
./update-ssh-keys.sh
|
|
|
|
echo "klice aktualizovany"
|
|
|
|
cp ./update-ssh-keys.sh /usr/bin/update-ssh-keys.sh
|
|
cp ./config/update-ssh-keys.service /etc/systemd/system/update-ssh-keys.service
|
|
cp ./config/update-ssh-keys.timer /etc/systemd/system/update-ssh-keys.timer
|
|
systemctl daemon-reload
|
|
systemctl enable --now update-ssh-keys.timer
|