Proxmox setup

This commit is contained in:
Sergey Mazein
2025-10-19 19:22:34 +03:00
parent 80933c32a8
commit 98dfb2fc03
2 changed files with 22 additions and 1 deletions
+2
View File
@@ -18,6 +18,8 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}"
sudo apt install openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential -y
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config
sudo sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes\n/' /etc/ssh/sshd_config
#write out current crontab
+20 -1
View File
@@ -9,7 +9,8 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}"
sudo apt install nginx openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential certbot python3-certbot-nginx iptables-persistent -y
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config
. /etc/os-release
@@ -86,6 +87,24 @@ sudo systemctl restart exporterd
zabbix_agentd -V
FSTAB="/etc/fstab"
BACKUP="/etc/fstab.bak.$(date +%F-%H%M%S)"
TARGET_MOUNT="/var/lib/vz"
echo "🔧 Создание резервной копии: $BACKUP"
cp "$FSTAB" "$BACKUP"
echo "📝 Обновление опций монтирования для $TARGET_MOUNT"
sed -i "s|\(/dev/vg0/data\s\+$TARGET_MOUNT\s\+xfs\s\+\)defaults\b|\1defaults,noatime|" "$FSTAB"
echo "🔁 Remount $TARGET_MOUNT с новой опцией..."
systemctl daemon-reload
mount -o remount "$TARGET_MOUNT"
echo "✅ Проверка..."
mount | grep "$TARGET_MOUNT"
sudo sed -i 's/access_log \/var\/log\/nginx\/access.log;/#access_log \/var\/log\/nginx\/access.log;\n\ access_log off;\n error_log \/dev\/null crit;\n/' /etc/nginx/nginx.conf
sudo systemctl restart nginx