cloud-init-ubuntu-jammy.yml

#cloud-config
package_upgrade: true
packages:
  - zsh
  - tmux
  - nmap
  - curl
  - wget
  - git
  - htop
  - iperf
hostname: ubuntu-jammy
fqdn: ubuntu-jammy.home.local
users:
  - name: knt
    groups: sudo
    shell: /bin/zsh
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    ssh-authorized-keys:
      - ssh-rsa xxxxxxxxxxxxxxxxxxxxxxxx
    sudo: ALL=(ALL) NOPASSWD:ALL
    
runcmd:
  - sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
  - sed -i 's|[#]*PasswordAuthentication yes|PasswordAuthentication no|g' /etc/ssh/sshd_config
  - sed -i 's|UsePAM yes|UsePAM no|g' /etc/ssh/sshd_config
  - restart ssh
  #cloudflare argo tunnel
  - mkdir -p --mode=0755 /usr/share/keyrings
  - curl -fsSL https://pkg.cloudflare.com/cloudflare-main.gpg | sudo tee /usr/share/keyrings/cloudflare-main.gpg >/dev/null
  - echo 'deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/cloudflared jammy main' | sudo tee /etc/apt/sources.list.d/cloudflared.list
  - apt update && apt install cloudflared
  #crowdsec
  - curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bash
  - apt install crowdsec
  - apt install crowdsec-firewall-bouncer-iptables
final_message: "The system is finally up, after $UPTIME seconds"