Compare commits
3
Commits
07c85905a9
...
20baee757d
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
20baee757d | ||
|
|
a97bfcc1b3 | ||
|
|
f8b476fd56 |
@@ -17,6 +17,17 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}"
|
|||||||
|
|
||||||
sudo apt install openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential ripgrep bubblewrap -y
|
sudo apt install openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential ripgrep bubblewrap -y
|
||||||
|
|
||||||
|
# NodeJs install
|
||||||
|
curl -SLO https://deb.nodesource.com/nsolid_setup_deb.sh
|
||||||
|
chmod 500 nsolid_setup_deb.sh
|
||||||
|
./nsolid_setup_deb.sh 22
|
||||||
|
apt-get install nodejs -y
|
||||||
|
|
||||||
|
npm -vnpm install -g npm
|
||||||
|
|
||||||
|
# Code install
|
||||||
|
npm install -g @openai/codex@latest
|
||||||
|
|
||||||
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@92.255.251.110 root@91.99.38.107 root@144.124.230.6 root@158.69.30.149 root@167.114.172.204 root@213.239.194.132 root@144.124.230.6 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
|
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@92.255.251.110 root@91.99.38.107 root@144.124.230.6 root@158.69.30.149 root@167.114.172.204 root@213.239.194.132 root@144.124.230.6 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
|
||||||
# sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config
|
# sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config
|
||||||
|
|
||||||
|
|||||||
@@ -30,24 +30,29 @@ sudo /etc/init.d/zabbix-agent status
|
|||||||
#zabbix_agentd -V
|
#zabbix_agentd -V
|
||||||
|
|
||||||
echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}"
|
echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}"
|
||||||
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null << EOF
|
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null <<'EOF'
|
||||||
[Unit]
|
[Unit]
|
||||||
Description=Restore iptables rules after Proxmox Firewall
|
Description=Restore custom IPv4 NAT rules after Proxmox Firewall
|
||||||
After=pve-firewall.service
|
|
||||||
Wants=network-online.target
|
Wants=network-online.target
|
||||||
|
After=network-online.target pve-firewall.service
|
||||||
ConditionPathExists=/etc/iptables/rules.v4
|
ConditionPathExists=/etc/iptables/rules.v4
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
ExecStart=/bin/sh -c '/sbin/iptables-restore < /etc/iptables/rules.v4'
|
ExecStart=/bin/sh -c '/sbin/iptables-restore -T nat < /etc/iptables/rules.v4'
|
||||||
RemainAfterExit=yes
|
RemainAfterExit=yes
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
systemctl enable --now iptables-restore-custom.service
|
systemctl daemon-reload
|
||||||
|
|
||||||
|
# Не даём стандартному сервису попытаться загрузить полный PVE snapshot.
|
||||||
|
systemctl disable netfilter-persistent.service 2>/dev/null || true
|
||||||
|
|
||||||
|
# Включить только на будущие загрузки.
|
||||||
|
systemctl enable iptables-restore-custom.service
|
||||||
|
|
||||||
echo -e "${C_LGn}Installing Node Exporter ...${RES}"
|
echo -e "${C_LGn}Installing Node Exporter ...${RES}"
|
||||||
cd $HOME && \
|
cd $HOME && \
|
||||||
|
|||||||
Reference in New Issue
Block a user