Oliver/cc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

no passwd

Browse Source
This commit is contained in:
Oliver
2025-08-25 06:01:18 +02:00
parent c373588b5b
commit d45114c4dc
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/onboarding
View File

@@ -62,4 +62,7 @@ rex doas mkdir -p /etc/doas.d
rex "doas sh -c 'grep -q \"permit nopass 4server as root\" /etc/doas.d/4server.conf 2>/dev/null || echo \"permit nopass 4server as root\" | tee -a /etc/doas.d/4server.conf > /dev/null'" rex "doas sh -c 'grep -q \"permit nopass 4server as root\" /etc/doas.d/4server.conf 2>/dev/null || echo \"permit nopass 4server as root\" | tee -a /etc/doas.d/4server.conf > /dev/null'"
rex "doas sh -c 'sed -i \"s/^#\?PasswordAuthentication.*/PasswordAuthentication no/\" /etc/ssh/sshd_config'"
rex doas rc-service sshd restart rex doas rc-service sshd restart

4
app/update
View File

@@ -11,15 +11,13 @@ template templates/.profile /home/4server/.profile
### PACKAGES ### PACKAGES
template templates/repositories /etc/apk/repositories template templates/repositories /etc/apk/repositories
rex "doas apk update && doas apk upgrade" rex "doas apk update && doas apk upgrade"
rex doas apk add fail2ban openssh ufw python3 build-base python3-dev linux-headers py3-pip gcc g++ musl-dev libffi-dev make jq rsync mc vim docker docker-compose htop linux-lts sqlite bash postgresql16-client rex doas apk add openssh ufw python3 build-base python3-dev linux-headers py3-pip gcc g++ musl-dev libffi-dev make jq rsync mc vim docker docker-compose htop linux-lts sqlite bash postgresql16-client
rex doas pip install --root-user-action ignore --break-system-packages --no-cache-dir "uvicorn[standard]" fastapi pydantic psutil rex doas pip install --root-user-action ignore --break-system-packages --no-cache-dir "uvicorn[standard]" fastapi pydantic psutil
### own bins ### own bins
echo "Running prsync ./sbin" echo "Running prsync ./sbin"
prsync -h "$hosts_file" -avz ./sbin/ /4server/sbin/ prsync -h "$hosts_file" -avz ./sbin/ /4server/sbin/
### Security
template templates/etc/fail2ban/jail.conf /etc/fail2ban/jail.conf