Prechádzať zdrojové kódy

Enable or disable root account access.

lewissmallwood 5 rokov pred
rodič
commit
110467fa0a

+ 1 - 0
.env.example

@@ -18,6 +18,7 @@ USER_EMAIL=admin@admin.com
 USER_PASSWORD=12345678
 
 SSH_DEFAULT_PORT=22
+ENABLE_SSH_ROOT_ACCESS=0
 
 BROADCAST_DRIVER=log
 CACHE_DRIVER=file

+ 2 - 1
app/Http/Controllers/ScriptsController.php

@@ -38,7 +38,8 @@ class ScriptsController extends Controller
             $server->password,
             $server->dbroot,
             $server->servercode,
-            $this->url->to('/')
+            $this->url->to('/'),
+            env("ENABLE_SSH_ROOT_ACCESS", 0)
         ], $script);
 
         return response($script)->withHeaders(['Content-Type' =>'application/x-sh']);

+ 4 - 0
storage/app/scripts/install.sh

@@ -13,6 +13,7 @@ PASS=???
 DBPASS=???
 SERVERCODE=???
 REMOTEURL=???
+ENABLEROOT=???
 
 #REMOTE CURL
 curl --request GET --url $REMOTEURL/server/api/start/$SERVERCODE
@@ -468,6 +469,9 @@ sudo rpl -i -w "# Port 22" "Port 22" /etc/ssh/sshd_config
 sudo rpl -i -w "#Port 22" "Port 22" /etc/ssh/sshd_config
 sudo rpl -i -w "Port 22" "Port $PORT" /etc/ssh/sshd_config
 sudo rpl -i -w "PermitRootLogin yes" "PermitRootLogin no" /etc/ssh/sshd_config
+if [ "$ENABLEROOT" -eq "1" ] ; then
+    sudo rpl -i -w "PermitRootLogin no" "PermitRootLogin yes" /etc/ssh/sshd_config;
+fi
 sudo rpl -i -w "# AuthorizedKeysFile" "AuthorizedKeysFile" /etc/ssh/sshd_config
 sudo rpl -i -w "#AuthorizedKeysFile" "AuthorizedKeysFile" /etc/ssh/sshd_config
 sudo rpl -i -w "AuthorizedKeysFile" "#AuthorizedKeysFile" /etc/ssh/sshd_config