Ahmed Morsi eramax

🎯

Focusing

eramax / secure-server.sh

Created April 19, 2020 05:56 — forked from etoews/secure-server.sh

Secure an Ubuntu server

	#!/bin/bash

	# This script assumes you've created this server with a key pair. If you haven't, you're not getting back in.

	# Switch to everett user
	adduser --shell /bin/bash --gecos "User for managing feeds" --disabled-password --home /home/everett everett
	adduser everett sudo
	grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers \|\| echo "#includedir /etc/sudoers.d" >> /etc/sudoers
	( umask 226 && echo "everett ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/50_everett_sh )
	mkdir /home/everett/.ssh