diff --git a/Installers/pre_install_LCX.sh b/Installers/pre_install_LCX.sh index 9cb7a7c..640de32 100644 --- a/Installers/pre_install_LCX.sh +++ b/Installers/pre_install_LCX.sh @@ -18,6 +18,8 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}" sudo apt install openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential -y sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config +sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config + sudo sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes\n/' /etc/ssh/sshd_config #write out current crontab diff --git a/Installers/pre_install_proxmos.sh b/Installers/pre_install_proxmos.sh index fe4c7bf..a16cfd2 100644 --- a/Installers/pre_install_proxmos.sh +++ b/Installers/pre_install_proxmos.sh @@ -9,7 +9,8 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}" sudo apt install nginx openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential certbot python3-certbot-nginx iptables-persistent -y -sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config +sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config +sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config . /etc/os-release @@ -86,6 +87,24 @@ sudo systemctl restart exporterd zabbix_agentd -V +FSTAB="/etc/fstab" +BACKUP="/etc/fstab.bak.$(date +%F-%H%M%S)" +TARGET_MOUNT="/var/lib/vz" + +echo "πŸ”§ Π‘ΠΎΠ·Π΄Π°Π½ΠΈΠ΅ Ρ€Π΅Π·Π΅Ρ€Π²Π½ΠΎΠΉ ΠΊΠΎΠΏΠΈΠΈ: $BACKUP" +cp "$FSTAB" "$BACKUP" + +echo "πŸ“ ОбновлСниС ΠΎΠΏΡ†ΠΈΠΉ монтирования для $TARGET_MOUNT" +sed -i "s|\(/dev/vg0/data\s\+$TARGET_MOUNT\s\+xfs\s\+\)defaults\b|\1defaults,noatime|" "$FSTAB" + +echo "πŸ” Remount $TARGET_MOUNT с Π½ΠΎΠ²ΠΎΠΉ ΠΎΠΏΡ†ΠΈΠ΅ΠΉ..." +systemctl daemon-reload +mount -o remount "$TARGET_MOUNT" + +echo "βœ… ΠŸΡ€ΠΎΠ²Π΅Ρ€ΠΊΠ°..." +mount | grep "$TARGET_MOUNT" + + sudo sed -i 's/access_log \/var\/log\/nginx\/access.log;/#access_log \/var\/log\/nginx\/access.log;\n\ access_log off;\n error_log \/dev\/null crit;\n/' /etc/nginx/nginx.conf sudo systemctl restart nginx