SSH session alert script

ssh_alert_script_pam.sh

#!/bin/bash

# This script should be allocated in /etc/pam.scripts/ssh_alert.sh
# Then, in /etc/pam.d/sshd add this line:
# # SSH Alert script
# session required pam_exec.so /etc/pam.scripts/ssh_alert.sh


echo $PAM_TYPE

# Ntfy vars
TOPIC="`hostname`-ssh"
MSG=""
HOST="`hostname`"
PRIORITY="high"
TAG_SSH="ssh"

case $PAM_TYPE in
  "open_session")
    MSG="[$(date +"%Y-%m-%d %H:%M:%S")] - El usuario $PAM_USER se ha logado desde $PAM_RHOST via $PAM_SERVICE (TTY $PAM_TTY)."
    TAGS="$TAG_SSH,$HOST,warning"
    ;;
  "close_session")
    MSG="[$(date +"%Y-%m-%d %H:%M:%S")] - El usuario $PAM_USER ha salido."
    PRIORITY="default"
    TAGS="$TAG_SSH,$HOST,white_check_mark"
    ;;
esac

/usr/share/local/bin/publishMessageToNtfy.sh -t $TOPIC -T "SSH login [$HOST]" -m "$MSG"  -p $PRIORITY -x $TAGS >> /dev/null