Compare commits
3
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
20baee757d | ||
|
|
a97bfcc1b3 | ||
|
|
f8b476fd56 |
@@ -17,6 +17,17 @@ echo -e "${C_LGn}Installation of necessary components ...${RES}"
|
||||
|
||||
sudo apt install openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential ripgrep bubblewrap -y
|
||||
|
||||
# NodeJs install
|
||||
curl -SLO https://deb.nodesource.com/nsolid_setup_deb.sh
|
||||
chmod 500 nsolid_setup_deb.sh
|
||||
./nsolid_setup_deb.sh 22
|
||||
apt-get install nodejs -y
|
||||
|
||||
npm -vnpm install -g npm
|
||||
|
||||
# Code install
|
||||
npm install -g @openai/codex@latest
|
||||
|
||||
sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@92.255.251.110 root@91.99.38.107 root@144.124.230.6 root@158.69.30.149 root@167.114.172.204 root@213.239.194.132 root@144.124.230.6 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
|
||||
# sudo sed -i -e '/^AllowUsers/ { /root@144\.217\.201\.167/! { s/$/ root@144.217.201.167/; h; } }' /etc/ssh/sshd_config
|
||||
|
||||
|
||||
@@ -30,24 +30,29 @@ sudo /etc/init.d/zabbix-agent status
|
||||
#zabbix_agentd -V
|
||||
|
||||
echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}"
|
||||
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null << EOF
|
||||
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null <<'EOF'
|
||||
[Unit]
|
||||
Description=Restore iptables rules after Proxmox Firewall
|
||||
After=pve-firewall.service
|
||||
Description=Restore custom IPv4 NAT rules after Proxmox Firewall
|
||||
Wants=network-online.target
|
||||
After=network-online.target pve-firewall.service
|
||||
ConditionPathExists=/etc/iptables/rules.v4
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/bin/sh -c '/sbin/iptables-restore < /etc/iptables/rules.v4'
|
||||
ExecStart=/bin/sh -c '/sbin/iptables-restore -T nat < /etc/iptables/rules.v4'
|
||||
RemainAfterExit=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
systemctl enable --now iptables-restore-custom.service
|
||||
systemctl daemon-reload
|
||||
|
||||
# Не даём стандартному сервису попытаться загрузить полный PVE snapshot.
|
||||
systemctl disable netfilter-persistent.service 2>/dev/null || true
|
||||
|
||||
# Включить только на будущие загрузки.
|
||||
systemctl enable iptables-restore-custom.service
|
||||
|
||||
echo -e "${C_LGn}Installing Node Exporter ...${RES}"
|
||||
cd $HOME && \
|
||||
|
||||
Reference in New Issue
Block a user