diff --git a/scripts/system-setup.sh b/scripts/system-setup.sh index c305ccb..50db5dd 100755 --- a/scripts/system-setup.sh +++ b/scripts/system-setup.sh @@ -64,17 +64,6 @@ sudo hostnamectl hostname $hostname sudo hostnamectl banner bottom "changed hostname" -# configure sshd -banner top "configuring sshd" -sudo tee /etc/ssh/sshd_config << 'EOF' -Include /etc/ssh/sshd_config.d/*.conf -PermitRootLogin no -PasswordAuthentication no -KbdInteractiveAuthentication no -EOF -sudo systemctl reload sshd -banner bottom "configuring sshd" - # configure dnf banner top "configuring dnf" sudo tee /etc/dnf/dnf.conf << 'EOF' @@ -89,6 +78,12 @@ banner top "updating system" sudo dnf update -y banner bottom "updated system" +# install misc +banner top "installing misc packages" +sudo dnf install -y micro btop fastfetch policycoreutils-python-utils +curl -fsSL https://vykar.borgbase.com/install.sh | sh +banner bottom "installed misc packages" + # install (& configure) docker banner top "installing docker" sudo dnf config-manager addrepo --from-repofile https://download.docker.com/linux/fedora/docker-ce.repo --overwrite @@ -98,12 +93,6 @@ sudo systemctl enable --now docker sudo docker run hello-world banner bottom "installed docker" -# install misc -banner top "installing other packages" -sudo dnf install -y micro btop fastfetch -curl -fsSL https://vykar.borgbase.com/install.sh | sh -banner bottom "installed other packages" - # install (& configure) fish banner top "installing fish" sudo dnf install -y fish @@ -118,5 +107,18 @@ sudo dnf install -y cronie sudo systemctl enable --now crond banner bottom "installed cron" +# configure sshd +banner top "configuring sshd" +sudo tee /etc/ssh/sshd_config << 'EOF' +Include /etc/ssh/sshd_config.d/*.conf +Port 67 +PermitRootLogin no +PasswordAuthentication no +KbdInteractiveAuthentication no +EOF +sudo semanage port -a -t ssh_port_t -p tcp 67 +sudo systemctl restart sshd +banner bottom "configuring sshd" + # finish -echo -e "done! please log out and log back in\n" +echo -e "done! please log out and log back in with \e[1;5mssh -p 67 $(id -un)@$(curl -s https://checkip.amazonaws.com)\e[0m\n"