[new sudo user + disable root login]

create-sudo-user-disable-root.sh

#!/usr/bin/env bash

# create user
adduser --disabled-password --gecos "" selfagency

# add to sudo group
usermod -aG sudo selfagency

# copy over ssh keys
rsync --archive --chown=selfagency:selfagency ~/.ssh /home/selfagency

# disable password
echo "selfagency ALL=(ALL) NOPASSWD: ALL" >>/etc/sudoers.d/selfagency

# disable root login
sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config

# just to be sure
chown -R selfagency:selfagency /home/selfagency

# restart ssh
service ssh restart