101 lines
2.2 KiB
Bash
Executable file
101 lines
2.2 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
set -ex
|
|
|
|
version="${1}"
|
|
[[ -z "${version}" ]] && version="${hostname#*-}"
|
|
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "This script must be run as root" 1>&2
|
|
sudo "$0" "$1" "$2" "$3" "$4" "$5" "$6" "$7" "$8" "$9"
|
|
exit 0
|
|
else
|
|
echo "Als ROOT angemeldet!!!"
|
|
fi
|
|
echo "Als root Angemeldet"
|
|
|
|
function makesshsecure() {
|
|
|
|
#sshd -T |grep permitrootlogin
|
|
|
|
sed -e 's|PermitRootLogin=.*$|PermitRootLogin=\ no|' -i /etc/ssh/sshd_config
|
|
sed -e 's|Port=.*$|Port=\ 2020|' -i /etc/ssh/sshd_config
|
|
|
|
systemctl restart sshd.service
|
|
|
|
cat /etc/services
|
|
}
|
|
|
|
function makesshsecure() {
|
|
apt install tcpd -y
|
|
|
|
nano -w /etc/hosts.allow
|
|
|
|
nano -w /etc/hosts.deny
|
|
}
|
|
|
|
function makeiptables() {
|
|
|
|
apt install iptables-persistent -y
|
|
|
|
iptables-save > /etc/iptables/rules.v4
|
|
ip6tables-save > /etc/iptables/rules.v6
|
|
}
|
|
|
|
function makefail2ban() {
|
|
apt install fail2ban -y
|
|
|
|
cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
|
|
|
|
nano -w /etc/fail2ban/jail.local
|
|
|
|
systemctl restart fail2ban.service
|
|
}
|
|
|
|
function makeuser() {
|
|
echo "%wheel ALL=(ALL)" >> /etc/sudoers
|
|
adduser user1 wheel
|
|
}
|
|
|
|
function userloginalert() {
|
|
|
|
apt install finger -y
|
|
echo "#!/bin/bash
|
|
|
|
echo "Login auf $(hostname) am $(date +%Y-%m-%d) um $(date +%H:%M)"
|
|
echo "Benutzer: $USER"
|
|
echo
|
|
finger" >> /opt/shell-login.sh
|
|
|
|
echo "/opt/shell-login.sh | mailx -s "SSH-Log-in auf ihrem Server $(cat /etc/hostname)" bahn01@online.de" > /etc/profile
|
|
chmod 755 /opt/shell-login.sh
|
|
|
|
}
|
|
|
|
function dailyupdates() {
|
|
|
|
apt install fcron -y
|
|
|
|
echo "#!/bin/bash" > /etc/cron.daily/update-packages
|
|
echo -n "apt update && apt upgrade -y" >> /etc/cron.daily/update-packages
|
|
echo "ROOT" >> /etc/cron.daily/update-packages
|
|
echo "EXITVALUE=\$?" >> /etc/cron.daily/update-packages
|
|
echo "if [ \$EXITVALUE != 0 ]; then" >> $/etc/cron.daily/update-packages
|
|
echo " /usr/bin/logger -t update-packages \"ALERT exited abnormally with [\$EXITVALUE]\"" >> /etc/cron.daily/update-packages
|
|
echo "fi" >> /etc/cron.daily/update-packages
|
|
echo "exit \$EXITVALUE" >> /etc/cron.daily/update-packages
|
|
chmod +x /etc/cron.daily/update-packages
|
|
|
|
}
|
|
|
|
makesshsecure
|
|
sleep 1
|
|
makeiptables
|
|
sleep 1
|
|
makefail2ban
|
|
sleep 1
|
|
makeuser
|
|
sleep 1
|
|
userloginalert
|
|
sleep 1
|
|
dailyupdates
|