|
|
|
@ -120,6 +120,7 @@ sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/ss |
|
|
|
sudo sed -i 's/PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config |
|
|
|
sudo sed -i 's/PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config |
|
|
|
sudo sed -i 's/#PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
sudo sed -i 's/#PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
sudo sed -i 's/PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
sudo sed -i 's/PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config |
|
|
|
|
|
|
|
sudo systemctl enable ssh |
|
|
|
sudo systemctl restart ssh |
|
|
|
sudo systemctl restart ssh |
|
|
|
|
|
|
|
|
|
|
|
# Additional tools fail2ban |
|
|
|
# Additional tools fail2ban |
|
|
|
@ -160,6 +161,9 @@ figlet "Mistborn default NIC: $iface" |
|
|
|
#IPV4_PUBLIC=$(ip -o -4 route show default | egrep -o 'dev [^ ]*' | awk '{print $2}' | xargs ip -4 addr show | grep 'inet ' | awk '{print $2}' | grep -o "^[0-9.]*" | tr -cd '\11\12\15\40-\176' | head -1) # tail -1 to get last |
|
|
|
#IPV4_PUBLIC=$(ip -o -4 route show default | egrep -o 'dev [^ ]*' | awk '{print $2}' | xargs ip -4 addr show | grep 'inet ' | awk '{print $2}' | grep -o "^[0-9.]*" | tr -cd '\11\12\15\40-\176' | head -1) # tail -1 to get last |
|
|
|
IPV4_PUBLIC="10.2.3.1" |
|
|
|
IPV4_PUBLIC="10.2.3.1" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# clean docker volumes, etc. |
|
|
|
|
|
|
|
sudo systemctl stop docker |
|
|
|
|
|
|
|
|
|
|
|
# clean |
|
|
|
# clean |
|
|
|
if [ -f "/etc/systemd/system/Mistborn-base.service" ]; then |
|
|
|
if [ -f "/etc/systemd/system/Mistborn-base.service" ]; then |
|
|
|
sudo systemctl stop Mistborn*.service 2>/dev/null || true |
|
|
|
sudo systemctl stop Mistborn*.service 2>/dev/null || true |
|
|
|
@ -176,6 +180,8 @@ if [ ! -d ./.envs/.production ]; then |
|
|
|
./scripts/subinstallers/gen_prod_env.sh "$MISTBORN_DEFAULT_PASSWORD" |
|
|
|
./scripts/subinstallers/gen_prod_env.sh "$MISTBORN_DEFAULT_PASSWORD" |
|
|
|
fi |
|
|
|
fi |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
sudo systemctl restart docker |
|
|
|
|
|
|
|
|
|
|
|
# unattended upgrades |
|
|
|
# unattended upgrades |
|
|
|
sudo cp ./scripts/conf/20auto-upgrades /etc/apt/apt.conf.d/ |
|
|
|
sudo cp ./scripts/conf/20auto-upgrades /etc/apt/apt.conf.d/ |
|
|
|
sudo cp ./scripts/conf/50unattended-upgrades /etc/apt/apt.conf.d/ |
|
|
|
sudo cp ./scripts/conf/50unattended-upgrades /etc/apt/apt.conf.d/ |
|
|
|
|