no security

This commit is contained in:
jakubknczny 2021-11-24 17:16:32 +01:00
parent 31784fca1b
commit 82ea598428

View File

@ -4,17 +4,3 @@ curl -fOL https://github.com/cdr/code-server/releases/download/v3.12.0/code-serv
dpkg -i code-server_3.12.0_amd64.deb dpkg -i code-server_3.12.0_amd64.deb
systemctl enable --now code-server@kk systemctl enable --now code-server@kk
printf "[sshd]\nenabled = true\nbanaction = iptables-multiport" > /etc/fail2ban/jail.local
systemctl enable fail2ban
ufw allow OpenSSH
ufw enable
sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
sed -i -e '/^PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config
sed -i -e '/^X11Forwarding/s/^.*$/X11Forwarding no/' /etc/ssh/sshd_config
sed -i -e '/^#MaxAuthTries/s/^.*$/MaxAuthTries 20/' /etc/ssh/sshd_config
sed -i -e '/^#AllowTcpForwarding/s/^.*$/AllowTcpForwarding no/' /etc/ssh/sshd_config
sed -i -e '/^#AllowAgentForwarding/s/^.*$/AllowAgentForwarding no/' /etc/ssh/sshd_config
sed -i -e '/^#AuthorizedKeysFile/s/^.*$/AuthorizedKeysFile .ssh\/authorized_keys/' /etc/ssh/sshd_config
sed -i '$a AllowUsers kk' /etc/ssh/sshd_config