agala/server-initializer
1
0
Fork 0
mirror of https://github.com/elAgala/server-initializer.git synced 2026-02-14 05:06:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: allow multiple AllowUsers on sshd_config file

Browse Source
This commit is contained in:
elAgala
2025-07-09 17:47:44 -03:00
parent 32ed5d4629
commit 3ce419d99f
1 changed files with 17 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
user/ssh_config.sh
View File

@@ -26,9 +26,11 @@ function config_ssh() {
# Create SSH configuration file instead of modifying main sshd_config # Create SSH configuration file instead of modifying main sshd_config
config_file="/etc/ssh/sshd_config.d/server-initializer.conf" config_file="/etc/ssh/sshd_config.d/server-initializer.conf"
echo "[ SSH ]: Creating SSH configuration file" echo "[ SSH ]: Configuring SSH settings"
sudo mkdir -p /etc/ssh/sshd_config.d sudo mkdir -p /etc/ssh/sshd_config.d
# Check if config file exists
if [ ! -f "$config_file" ]; then
# Create the configuration file with security settings # Create the configuration file with security settings
sudo tee "$config_file" >/dev/null <<EOF sudo tee "$config_file" >/dev/null <<EOF
# Server Initializer SSH Configuration # Server Initializer SSH Configuration
@@ -45,8 +47,18 @@ UsePAM no
# Only allow specific users # Only allow specific users
AllowUsers $username AllowUsers $username
EOF EOF
echo "[ SSH ]: SSH configuration file created at $config_file" echo "[ SSH ]: SSH configuration file created at $config_file"
else
# File exists, check if user is already in AllowUsers
if ! sudo grep -q "AllowUsers.*$username" "$config_file"; then
# Add user to existing AllowUsers line
sudo sed -i "s/^AllowUsers.*/& $username/" "$config_file"
echo "[ SSH ]: User $username added to existing AllowUsers"
else
echo "[ SSH ]: User $username already in AllowUsers"
fi
fi
echo "[ SSH ]: Root login disabled" echo "[ SSH ]: Root login disabled"
echo "[ SSH ]: Password authentication disabled" echo "[ SSH ]: Password authentication disabled"
echo "[ SSH ]: User $username added to allowed users" echo "[ SSH ]: User $username added to allowed users"