Update setup scripts to install additional font packages, hide lastlog, and modify SSH configuration for improved security. Add new mkproxy function for dynamic proxy setup.
This commit is contained in:
@@ -25,6 +25,7 @@ alias free='free -h'
|
||||
alias pip='pip3'
|
||||
alias progress='progress -m'
|
||||
alias python='python3'
|
||||
alias su='su -'
|
||||
alias tmux='/usr/bin/tmux attach -d 2>/dev/null || /usr/bin/tmux new'
|
||||
alias vlock='vlock -a'
|
||||
alias wget='wget -q --show-progress --no-hsts'
|
||||
|
||||
@@ -120,6 +120,16 @@ mntusb() {
|
||||
sudo mount $1 /mnt -o uid=$(id -u),gid=$(id -g)
|
||||
}
|
||||
|
||||
mkproxy() {
|
||||
PROXY_USERNAME=$(rnd 10)
|
||||
PROXY_PASSWORD=$(rnd 10)
|
||||
PROXY_PORT=$(shuf -i 40000-65535 -n 1)
|
||||
PROXY_IP=$(curl -s -4 https://maxmind.supernets.org | jq -rc .ip
|
||||
docker stop proxy>/dev/null 2>&1 && docker rm proxy>/dev/null 2>&1
|
||||
docker run -d --name proxy --restart unless-stopped -e PROXY_USER=$PROXY_USERNAME -e PROXY_PASSWORD=$PROXY_PASSWORD -e PROXY_PORT=$PROXY_PORT -p $PROXY_PORT:$PROXY_PORT serjs/go-socks5-proxy
|
||||
echo "$PROXY_USERNAME:$PROXY_PASSWORD@$PROXY_IP:$PROXY_PORT"
|
||||
}
|
||||
|
||||
qr() {
|
||||
curl qrenco.de/$1
|
||||
}
|
||||
|
||||
@@ -15,10 +15,12 @@ HOSTNAME="deathstar"
|
||||
setup_packages() {
|
||||
# Install GUI dependant packages
|
||||
sudo apt install -y firefox nemo redshift rpi-imager steam-installer virtualbox vlc xclip
|
||||
sudo apt install -y fonts-noto-core fonts-noto-extra fonts-noto-cjk fonts-noto-color-emoji fonts-dejavu fonts-freefont-ttf
|
||||
sudo apt install -y eyed3 rhythmbox
|
||||
sudo apt install -y gnome-tweaks gnome-shell-extensions gnome-shell-extension-manager
|
||||
|
||||
# Install font packages
|
||||
sudo apt install -y fonts-noto-core fonts-noto-extra fonts-noto-cjk fonts-noto-color-emoji fonts-noto-arabic fonts-amiri fonts-scheherazade fonts-dejavu fonts-freefont-ttf
|
||||
|
||||
# Install development packages
|
||||
sudo apt install -y ansible python3 python3-pip
|
||||
|
||||
@@ -85,6 +87,9 @@ setup_root() {
|
||||
# Setup Nano
|
||||
printf "set boldtext\nset minibar\nset nohelp\nset nowrap\nset quickblank\nset tabsize 4\nunbind ^J main\nunbind ^L main\nset selectedcolor black,red\ninclude \"/usr/share/nano/*.nanorc\"\n" | sudo tee /etc/nanorc > /dev/null
|
||||
|
||||
# Hide lastlog
|
||||
sed -i '/session optional pam_lastlog.so/d' /etc/pam.d/login
|
||||
|
||||
# Setup Sudoers
|
||||
printf "Defaults lecture = always\nDefaults lecture_file = /etc/sudoers.d/sudoers.lecture\nroot ALL=(ALL) ALL\n%%sudo ALL=(ALL) ALL\n" | sudo tee /etc/sudoers > /dev/null
|
||||
printf "\n\033[1m \033[32m\"Bee\" careful \033[34m__\n \033[32mwith sudo! \033[34m// \ \n \\\\\\_/ \033[33m//\n \033[35m''-.._.-''-.._.. \033[33m-(||)(')\n '''\033[0m\n" | sudo tee /etc/sudoers.d/sudoers.lecture > /dev/null
|
||||
|
||||
@@ -31,6 +31,9 @@ done
|
||||
wget -O $HOME/.bashrc $GIT_URL/.bashrc
|
||||
sed -i '/HISTCONTROL/d' $HOME/.bashrc
|
||||
|
||||
# Hide lastlog
|
||||
sed -i '/session optional pam_lastlog.so/d' /etc/pam.d/login\
|
||||
|
||||
# Setup Nano
|
||||
printf "set boldtext\nset minibar\nset nohelp\nset nowrap\nset quickblank\nset tabsize 4\nunbind ^J main\nunbind ^L main\nset selectedcolor black,red\ninclude \"/usr/share/nano/*.nanorc\"\n" | sudo tee /etc/nanorc > /dev/null
|
||||
|
||||
@@ -40,7 +43,7 @@ sudo systemctl stop systemd-journald && sudo rm -rf /var/log/journal && sudo sys
|
||||
|
||||
# Setup SSH
|
||||
RANDOM_PORT=$(shuf -i 1024-65535 -n 1)
|
||||
printf "AuthenticationMethods publickey\nBanner /etc/issue\nClientAliveInterval 0\nDisableForwarding yes\nPermitRootLogin no\nPort $RANDOM_PORT\nPrintLastLog no" | sudo tee /etc/ssh/sshd_config > /dev/null
|
||||
printf "AuthenticationMethods publickey\nBanner /etc/issue\nClientAliveInterval 0\nDisableForwarding yes\nPermitRootLogin prohibit-password\nPort $RANDOM_PORT\nPrintLastLog no" | sudo tee /etc/ssh/sshd_config > /dev/null
|
||||
mkdir -p $HOME/.ssh && echo $PUBKEY > $HOME/.ssh/authorized_keys && chmod 700 $HOME/.ssh && chown -R $USERNAME $HOME/.ssh && chmod 400 $HOME/.ssh/authorized_keys
|
||||
echo "SSH Port: $RANDOM_PORT"
|
||||
|
||||
@@ -51,7 +54,7 @@ printf "\n\033[1m \033[32m\"Bee\" careful \033[34m__\n \033[32mwith
|
||||
# Setup MOTD
|
||||
git clone --depth 1 https://github.com/bartobri/no-more-secrets /tmp/nms && sudo make -C /tmp/nms clean all install && sudo rm -rf /tmp/nms
|
||||
printf "clear && ((echo && printf \" E N T E R T H E V O I D\n\" && echo) | nms -af red) && cat /etc/motd" | sudo tee /etc/profile.d/motd.sh > /dev/null && sudo chmod +x /etc/profile.d/motd.sh
|
||||
sudo wget -O /etc/motd $GIT_URL/local/share/art/supernets.txt
|
||||
sudo wget -O /etc/motd https://raw.githubusercontent.com/acidvegas/void/master/local/share/art/supernets.txt
|
||||
|
||||
# Setup Tmux
|
||||
mkdir -p $HOME/.config/tmux && wget -O $HOME/.config/tmux/tmux.conf $GIT_URL/config/tmux/tmux.conf
|
||||
|
||||
Reference in New Issue
Block a user