Skip to content

Instantly share code, notes, and snippets.

@kolosek

kolosek/setup-security.sh

Last active May 28, 2023 08:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save kolosek/b22efef9fa3796f432a1d09e1136de3a to your computer and use it in GitHub Desktop.
Save kolosek/b22efef9fa3796f432a1d09e1136de3a to your computer and use it in GitHub Desktop.
Download ZIP
SSH access
Raw
setup-security.sh
#!/bin/bash
sudo apt install openssh-server
#Obezbjedjivanje SSH-a
echo "Obezbjedjivanje SSH-a..."
sudo sed -i 's/#Port 22/Port 9022/g' /etc/ssh/sshd_config
sudo sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
sudo sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
sudo sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords no/g' /etc/ssh/sshd_config
sudo systemctl restart ssh.service
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEAT4XcyE6kDHQN1fCF28XtB/6YJBGIdRU92VQsw3EZ1 admin.kolosek" >> .ssh/authorized_keys
#Instalacija i konfiguracija wazuh agenta
echo "Instalacija i konfiguracija wazuh agenta..."
curl -so wazuh-agent-4.3.10.deb https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.3.10-1_amd64.deb && sudo WAZUH_MANAGER='wazuh.kolosek.dev' WAZUH_AGENT_GROUP='developer' dpkg -i ./wazuh-agent-4.3.10.deb
sudo systemctl daemon-reload
sudo systemctl enable wazuh-agent
sudo systemctl start wazuh-agent
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment