install-debian-server.sh 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567
  1. #!/bin/sh
  2. # bachir soussi chiadmi
  3. #
  4. # http://www.debian.org/doc/manuals/securing-debian-howto/
  5. # https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1204-lts-server-part-1-basics
  6. # https://www.linode.com/docs/websites/lamp/lamp-server-on-debian-7-wheezy/
  7. # http://web-74.com/blog/reseaux/gerer-le-deploiement-facilement-avec-git/
  8. #
  9. echo '\033[35m
  10. ____ __ _ _____
  11. / __ \___ / /_ (_)___ _____ / ___/___ ______ _____ _____
  12. / / / / _ \/ __ \/ / __ `/ __ \ \__ \/ _ \/ ___/ | / / _ \/ ___/
  13. / /_/ / __/ /_/ / / /_/ / / / / ___/ / __/ / | |/ / __/ /
  14. /_____/\___/_.___/_/\__,_/_/ /_/ /____/\___/_/ |___/\___/_/
  15. \033[0m'
  16. echo "\033[35;1mThis script has been tested only on Linux Debian 7 \033[0m"
  17. echo "Please run this script as root"
  18. echo -n "Should we start? [Y|n] "
  19. read yn
  20. yn=${yn:-y}
  21. if [ "$yn" != "y" ]; then
  22. echo "aborting script!"
  23. exit
  24. fi
  25. # get the current position
  26. _cwd="$(pwd)"
  27. echo '\033[35m
  28. __ ______ __________ ___ ____ ______
  29. / / / / __ \/ ____/ __ \/ | / __ \/ ____/
  30. / / / / /_/ / / __/ /_/ / /| | / / / / __/
  31. / /_/ / ____/ /_/ / _, _/ ___ |/ /_/ / /___
  32. \____/_/ \____/_/ |_/_/ |_/_____/_____/
  33. \033[0m'
  34. apt-get update
  35. apt-get upgrade
  36. echo '\033[35m
  37. __ ____
  38. / |/ (_)_________
  39. / /|_/ / / ___/ ___/
  40. / / / / (__ ) /__
  41. /_/ /_/_/____/\___/
  42. \033[0m'
  43. apt-get install vim
  44. echo '\033[35m
  45. __ _____ ____ ____ _______ __
  46. / / / / | / __ \/ __ \/ ____/ | / /
  47. / /_/ / /| | / /_/ / / / / __/ / |/ /
  48. / __ / ___ |/ _, _/ /_/ / /___/ /| /
  49. /_/ /_/_/ |_/_/ |_/_____/_____/_/ |_/
  50. \033[0m'
  51. echo "\033[35;1mInstalling harden \033[0m"
  52. sleep 3
  53. apt-get install harden
  54. echo "\033[92;1mHarden instaled\033[Om"
  55. echo '\033[35m
  56. ______________ _______ _____ __ __
  57. / ____/ _/ __ \/ ____/ | / / | / / / /
  58. / /_ / // /_/ / __/ | | /| / / /| | / / / /
  59. / __/ _/ // _, _/ /___ | |/ |/ / ___ |/ /___/ /___
  60. /_/ /___/_/ |_/_____/ |__/|__/_/ |_/_____/_____/
  61. \033[0m'
  62. echo "\033[35;1mInstalling ufw and setup firewall (allowing only ssh and http) \033[0m"
  63. sleep 3
  64. apt-get install ufw
  65. ufw allow ssh
  66. ufw allow http
  67. ufw enable
  68. ufw status verbose
  69. echo "\033[92;1mufw installed and firwall configured\033[Om"
  70. echo '\033[35m
  71. ______ _ _____ __
  72. / ____/___ _(_) /__ \ / /_ ____ _____
  73. / /_ / __ `/ / /__/ // __ \/ __ `/ __ \
  74. / __/ / /_/ / / // __// /_/ / /_/ / / / /
  75. /_/ \__,_/_/_//____/_.___/\__,_/_/ /_/
  76. \033[0m'
  77. echo "\033[35;1mInstalling fall2ban \033[0m"
  78. apt-get install fail2ban
  79. cat "$_cwd"/assets/fail2ban.jail.conf > /etc/fail2ban/jail.conf
  80. echo "\033[92;1mfail2ban installed and configured\033[Om"
  81. echo '\033[35m
  82. __ __ __
  83. / /______ ____ _____/ /______/ /
  84. / //_/ __ \/ __ \/ ___/ //_/ __ /
  85. / ,< / / / / /_/ / /__/ ,< / /_/ /
  86. /_/|_/_/ /_/\____/\___/_/|_|\__,_/
  87. \033[0m'
  88. echo "\033[35;1mInstalling knockd \033[0m"
  89. sleep 3
  90. apt-get install knockd
  91. echo -n "define a sequence number for opening (as 7000,8000,9000) : "
  92. read sq1
  93. echo -n "define a sequence number for closing (as 9000,8000,7000) : "
  94. read sq2
  95. sed -i "s/7000,8000,9000/$sq1/g" /etc/knockd.conf
  96. sed -i "s/9000,8000,7000/$sq2/g" /etc/knockd.conf
  97. sed -i 's/START_KNOCKD=0/START_KNOCKD=1/g' /etc/default/knockd
  98. echo "\033[92;1mknockd installed and configured\033[Om"
  99. echo "\033[92;1mplease note these sequences for future knocking\033[Om"
  100. echo "opening : $sq1 ; closing : $sq2"
  101. echo '\033[35m
  102. __ _______ __________
  103. / / / / ___// ____/ __ \
  104. / / / /\__ \/ __/ / /_/ /
  105. / /_/ /___/ / /___/ _, _/
  106. \____//____/_____/_/ |_|
  107. \033[0m'
  108. echo "\033[35;1mCreate new user (you will be asked a user name and a password) \033[0m"
  109. sleep 3
  110. echo -n "Enter user name: "
  111. read user
  112. # read -p "Continue? (Y/N): " confirm && [[ $confirm == [yY] || $confirm == [yY][eE][sS] ]] || exit 1
  113. adduser "$user"
  114. echo "adding $user to admin group and limiting su to the admin group"
  115. groupadd admin
  116. usermod -a -G admin "$user"
  117. dpkg-statoverride --update --add root admin 4750 /bin/su
  118. echo "\033[92;1muser $user configured\033[Om"
  119. echo '\033[35m
  120. __ ______ ______
  121. / |/ / | / _/ /
  122. / /|_/ / /| | / // /
  123. / / / / ___ |_/ // /___
  124. /_/ /_/_/ |_/___/_____/
  125. \033[0m'
  126. echo "\033[35;1mEnable mail sending for php \033[0m"
  127. # http://www.sycha.com/lamp-setup-debian-linux-apache-mysql-php#anchor13
  128. sleep 3
  129. dpkg-reconfigure exim4-config
  130. echo '\033[35m
  131. __________ __ __
  132. / ___/ ___// / / /
  133. \__ \\__ \/ /_/ /
  134. ___/ /__/ / __ /
  135. /____/____/_/ /_/
  136. \033[0m'
  137. while [ "$securssh" != "y" ] && [ "$securssh" != "n" ]
  138. do
  139. echo -n "Securing ssh (disabling root login)? [y|n] "
  140. read securssh
  141. # securssh=${securssh:-y}
  142. done
  143. if [ "$securssh" = "y" ]; then
  144. sed -i 's/PermitRootLogin\ yes/PermitRootLogin no/g' /etc/ssh/sshd_config
  145. sed -i 's/PermitEmptyPasswords\ yes/PermitEmptyPasswords no/g' /etc/ssh/sshd_config
  146. sed -i 's/Protocol\ [0-9]/Protocol 2/g' /etc/ssh/sshd_config
  147. service ssh reload
  148. echo "\033[92;1mSSH secured\033[Om"
  149. else
  150. echo 'root user can still conect through ssh'
  151. fi
  152. echo '\033[35m
  153. ______ _______ _____
  154. | ____|__ __| __ \
  155. | |__ | | | |__) |
  156. | __| | | | ___/
  157. | | | | | |
  158. |_| |_| |_|
  159. \033[0m'
  160. echo -n "Should we install ftp server? [Y|n] "
  161. read yn
  162. yn=${yn:-y}
  163. if [ "$yn" != "y" ]; then
  164. echo "installing proftpd"
  165. apt-get install proftpd
  166. while [ "$_server_name" = "" ]
  167. do
  168. read -p "enter a server name ? " _server_name
  169. if [ "$_server_name" != "" ]; then
  170. read -p "is server name $_server_name correcte [y|n] " validated
  171. if [ "$validated" = "y" ]; then
  172. break
  173. else
  174. _server_name=""
  175. fi
  176. fi
  177. done
  178. echo "Configuring proftpd"
  179. cp "$_cwd"/assets/proftpd.conf /etc/proftpd/conf.d/"$_server_name".conf
  180. sed -ir "s/example/$_server_name/g" /etc/proftpd/conf.d/"$_server_name".conf
  181. ufw allow ftp
  182. addgroup ftpuser
  183. echo "ftp installtion done"
  184. echo "to permit to a user to connect through ftp, add him to the ftpuser group"
  185. echo "FTP users are jailed on their home by default"
  186. fi
  187. # TODO : allow ssh/ftp connection only from given ips
  188. echo "\033[35;1mInstalling AMP web server \033[0m"
  189. echo '\033[35m
  190. ___ __ ___
  191. / | ____ ____ ______/ /_ ___ |__ \
  192. / /| | / __ \/ __ `/ ___/ __ \/ _ \__/ /
  193. / ___ |/ /_/ / /_/ / /__/ / / / __/ __/
  194. /_/ |_/ .___/\__,_/\___/_/ /_/\___/____/
  195. /_/
  196. \033[0m'
  197. echo "\033[35;1mInstalling Apache2 \033[0m"
  198. sleep 3
  199. apt-get install apache2
  200. a2enmod rewrite
  201. cat "$_cwd"/assets/apache2.conf > /etc/apache2/apache2.conf
  202. # Change logrotate for Apache2 log files to keep 10 days worth of logs
  203. sed -i 's/\tweekly/\tdaily/' /etc/logrotate.d/apache2
  204. sed -i 's/\trotate .*/\trotate 10/' /etc/logrotate.d/apache2
  205. # Remove Apache server information from headers.
  206. sed -i 's/ServerTokens .*/ServerTokens Prod/' /etc/apache2/conf.d/security
  207. sed -i 's/ServerSignature .*/ServerSignature Off/' /etc/apache2/conf.d/security
  208. service apache2 restart
  209. echo "\033[92;1mApache2 installed\033[Om"
  210. echo '\033[35m
  211. __ ___ __
  212. / |/ /_ ___________ _/ /
  213. / /|_/ / / / / ___/ __ `/ /
  214. / / / / /_/ (__ ) /_/ / /
  215. /_/ /_/\__, /____/\__, /_/
  216. /____/ /_/
  217. \033[0m'
  218. echo "\033[35;1minstalling Mysql \033[0m"
  219. sleep 3
  220. apt-get install mysql-server
  221. mysql_secure_installation
  222. echo "\033[92;1mmysql installed\033[Om"
  223. echo '\033[35m
  224. ____ __ ______
  225. / __ \/ / / / __ \
  226. / /_/ / /_/ / /_/ /
  227. / ____/ __ / ____/
  228. /_/ /_/ /_/_/
  229. \033[0m'
  230. echo "\033[35;1mInstalling PHP \033[0m"
  231. sleep 3
  232. apt-get install php5 php-pear php5-gd
  233. echo "Configuring PHP"
  234. cp /etc/php5/apache2/php.ini /etc/php5/apache2/php.ini.back
  235. sed -i "s/max_execution_time\ =\ [0-9]\+/max_execution_time = 60/g" /etc/php5/apache2/php.ini
  236. sed -i "s/max_input_time\ =\ [0-9]\+/max_input_time = 60/g" /etc/php5/apache2/php.ini
  237. sed -i "s/memory_limit\ =\ [0-9]\+M/memory_limit = 512M/g" /etc/php5/apache2/php.ini
  238. sed -i "s/;\?error_reporting\ =\ [^\n]\+/error_reporting = E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR/g" /etc/php5/apache2/php.ini
  239. sed -i "s/;\?display_errors\ =\ On/display_errors = Off/g" /etc/php5/apache2/php.ini
  240. sed -i "s/;\?log_errors\ =\ Off/log_errors = On/g" /etc/php5/apache2/php.ini
  241. # following command doesn't work, make teh change manualy
  242. #sed -ri ":a;$!{N;ba};s/;\?\ \?error_log\ =\ [^\n]\+([^\n]*\n(\n|$))/error_log = \/var\/log\/php\/error.log\1/g" /etc/php5/apache2/php.ini
  243. echo "register_globals = Off" >> /etc/php5/apache2/php.ini
  244. mkdir /var/log/php
  245. chown www-data /var/log/php
  246. apt-get install php5-mysql
  247. echo "\033[92;1mphp installed\033[Om"
  248. echo '\033[35m
  249. __ __ ___ ___ __ _
  250. ____ / /_ ____ / |/ /_ __/ | ____/ /___ ___ (_)___
  251. / __ \/ __ \/ __ \/ /|_/ / / / / /| |/ __ / __ `__ \/ / __ \
  252. / /_/ / / / / /_/ / / / / /_/ / ___ / /_/ / / / / / / / / / /
  253. / .___/_/ /_/ .___/_/ /_/\__, /_/ |_\__,_/_/ /_/ /_/_/_/ /_/
  254. /_/ /_/ /____/
  255. \033[0m'
  256. echo "\033[35;1mInstalling phpMyAdmin \033[0m"
  257. apt-get install phpmyadmin
  258. # echo "include /etc/phpmyadmin/apache.conf" >> /etc/apache2/apache2.conf
  259. ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
  260. echo "\033[35;1msecuring phpMyAdmin \033[0m"
  261. sed -i "s/DirectoryIndex index.php/DirectoryIndex index.php\nAllowOverride all/"
  262. cp "$_cwd"/assets/phpmyadmin_htaccess > /usr/share/phpmyadmin/.htaccess
  263. echo -n "define a user name for phpmyadmin : "
  264. read un
  265. htpasswd -c /etc/phpmyadmin/.htpasswd $un
  266. service apache2 restart
  267. echo "\033[92;1mphpMyAdmin installed\033[Om"
  268. echo "\033[92;1mYou can access it at yourip/phpmyadmin\033[Om"
  269. echo '\033[35m
  270. __ __
  271. _ __/ /_ ____ _____/ /_
  272. | | / / __ \/ __ \/ ___/ __/
  273. | |/ / / / / /_/ (__ ) /_
  274. |___/_/ /_/\____/____/\__/
  275. \033[0m'
  276. echo "\033[35;1mVHOST install \033[0m"
  277. while [ "$vh" != "y" ] && [ "$vh" != "n" ]
  278. do
  279. echo -n "Should we install a vhost? [y|n] "
  280. read vh
  281. # vh=${vh:-y}
  282. done
  283. if [ "$vh" = "y" ]; then
  284. while [ "$_host_name" = "" ]
  285. do
  286. read -p "enter a hostname ? " _host_name
  287. if [ "$_host_name" != "" ]; then
  288. read -p "is hostname $_host_name correcte [y|n] " validated
  289. if [ "$validated" = "y" ]; then
  290. break
  291. else
  292. _host_name=""
  293. fi
  294. fi
  295. done
  296. cp "$_cwd"/assets/example.org.conf /etc/apache2/sites-available/"$_host_name".conf
  297. sed -ir "s/example\.org/$_host_name/g" /etc/apache2/sites-available/"$_host_name".conf
  298. mkdir -p /srv/www/"$_host_name"/public_html
  299. mkdir /srv/www/"$_host_name"/logs
  300. #set proper right to user will handle the app
  301. chown -R root:admin /srv/www/"$_host_name"/
  302. chmod -R g+w /srv/www/"$_host_name"/
  303. chmod -R g+r /srv/www/"$_host_name"/
  304. # create a shortcut to the site
  305. mkdir /home/"$user"/www/
  306. chown "$user":admin /home/"$user"/www/
  307. ln -s /srv/www/"$_host_name" /home/"$user"/www/"$_host_name"
  308. #activate the vhost
  309. a2ensite "$_host_name".conf
  310. #restart apache
  311. service apache2 restart
  312. echo "\033[92;1mvhost $_host_name configured\033[Om"
  313. else
  314. echo "Vhost installation aborted"
  315. fi
  316. echo '\033[35m
  317. __ ___ _ __ __ __ ___ _
  318. / |/ /__ ___ (_) /_ _/_/ / |/ /_ _____ (_)__
  319. / /|_/ / _ \/ _ \/ / __/ _/_/ / /|_/ / // / _ \/ / _ \
  320. /_/ /_/\___/_//_/_/\__/ /_/ /_/ /_/\_,_/_//_/_/_//_/
  321. \033[0m'
  322. echo "\033[35;1mInstalling Munin \033[0m"
  323. sleep 3
  324. # https://www.howtoforge.com/tutorial/server-monitoring-with-munin-and-monit-on-debian/
  325. apt-get install munin munin-node munin-plugins-extra
  326. # Configure Munin
  327. # enable plugins
  328. ln -s /usr/share/munin/plugins/mysql_ /etc/munin/plugins/mysql_
  329. ln -s /usr/share/munin/plugins/mysql_bytes /etc/munin/plugins/mysql_bytes
  330. ln -s /usr/share/munin/plugins/mysql_innodb /etc/munin/plugins/mysql_innodb
  331. ln -s /usr/share/munin/plugins/mysql_isam_space_ /etc/munin/plugins/mysql_isam_space_
  332. ln -s /usr/share/munin/plugins/mysql_queries /etc/munin/plugins/mysql_queries
  333. ln -s /usr/share/munin/plugins/mysql_slowqueries /etc/munin/plugins/mysql_slowqueries
  334. ln -s /usr/share/munin/plugins/mysql_threads /etc/munin/plugins/mysql_threads
  335. ln -s /usr/share/munin/plugins/apache_accesses /etc/munin/plugins/
  336. ln -s /usr/share/munin/plugins/apache_processes /etc/munin/plugins/
  337. ln -s /usr/share/munin/plugins/apache_volume /etc/munin/plugins/
  338. # ln -s /usr/share/munin/plugins/fail2ban /etc/munin/plugins/
  339. # dbdir, htmldir, logdir, rundir, and tmpldir
  340. sed -i 's/^#dbdir/dbdir/' /etc/munin/munin.conf
  341. sed -i 's/^#htmldir/htmldir/' /etc/munin/munin.conf
  342. sed -i 's/^#logdir/logdir/' /etc/munin/munin.conf
  343. sed -i 's/^#rundir/rundir/' /etc/munin/munin.conf
  344. sed -i 's/^#tmpldir/tmpldir/' /etc/munin/munin.conf
  345. sed -i "s/^\[localhost.localdomain\]/[${HOSTNAME}]/" /etc/munin/munin.conf
  346. # ln -s /etc/munin/apache24.conf /etc/apache2/conf-enabled/munin.conf
  347. sed -i 's/Require local/Require all granted\nOptions FollowSymLinks SymLinksIfOwnerMatch/g' /etc/munin/apache24.conf
  348. htpasswd -c /etc/munin/munin-htpasswd admin
  349. sed -i 's/Require all granted/AuthUserFile \/etc\/munin\/munin-htpasswd\nAuthName "Munin"\nAuthType Basic\nRequire valid-user/g' /etc/munin/apache24.conf
  350. service apache2 restart
  351. service munin-node restart
  352. echo "\033[92;1mMunin installed\033[Om"
  353. echo "\033[35;1mInstalling Monit \033[0m"
  354. sleep 3
  355. # https://www.howtoforge.com/tutorial/server-monitoring-with-munin-and-monit-on-debian/2/
  356. apt-get install monit
  357. # TODO setup monit rc
  358. cat "$_cwd"/assets/monitrc > /etc/monit/monitrc
  359. # TODO setup webaccess
  360. passok=0
  361. while [ "$passok" = "0" ]
  362. do
  363. echo -n "Write web access password to monit"
  364. read passwda
  365. echo -n "ReWrite web access password to monit"
  366. read passwdb
  367. if [ "$passwda" = "$passwdb" ]; then
  368. sed -i 's/PASSWD_TO_REPLACE/$passwda/g' /etc/monit/monitrc
  369. passok=1
  370. else
  371. echo "pass words don't match, please try again"
  372. fi
  373. done
  374. # TODO setup mail settings
  375. sed -i "s/server1\.example\.com/$HOSTNAME/g" /etc/monit/monitrc
  376. mkdir /var/www/html/monit
  377. echo "hello" > /var/www/html/monit/token
  378. service monit start
  379. echo "\033[92;1mMonit installed\033[Om"
  380. echo '\033[35m
  381. ___ __ __
  382. / |_ _______/ /_____ _/ /_
  383. / /| | | /| / / ___/ __/ __ `/ __/
  384. / ___ | |/ |/ (__ ) /_/ /_/ / /_
  385. /_/ |_|__/|__/____/\__/\__,_/\__/
  386. \033[0m'
  387. echo "\033[35;1mInstalling Awstat \033[0m"
  388. sleep 3
  389. apt-get install awstats
  390. # Configure AWStats
  391. temp=`grep -i sitedomain /etc/awstats/awstats.conf.local | wc -l`
  392. if [ $temp -lt 1 ]; then
  393. echo SiteDomain="$_host_name" >> /etc/awstats/awstats.conf.local
  394. fi
  395. # Disable Awstats from executing every 10 minutes. Put a hash in front of any line.
  396. sed -i 's/^[^#]/#&/' /etc/cron.d/awstats
  397. echo "\033[92;1mAwstat installed\033[Om"
  398. # echo '\033[35m
  399. # ______________ _______
  400. # /_ __/ ____/ |/ / __ \
  401. # / / / __/ / /|_/ / /_/ /
  402. # / / / /___/ / / / ____/
  403. # /_/ /_____/_/ /_/_/
  404. # \033[0m'
  405. # function check_tmp_secured {
  406. # temp1=`grep -w "/var/tempFS /tmp ext3 loop,nosuid,noexec,rw 0 0" /etc/fstab | wc -l`
  407. # temp2=`grep -w "tmpfs /tmp tmpfs rw,noexec,nosuid 0 0" /etc/fstab | wc -l`
  408. # if [ $temp1 -gt 0 ] || [ $temp2 -gt 0 ]; then
  409. # return 1
  410. # else
  411. # return 0
  412. # fi
  413. # } # End function check_tmp_secured
  414. # function secure_tmp_tmpfs {
  415. # cp /etc/fstab /etc/fstab.bak
  416. # # Backup /tmp
  417. # cp -Rpf /tmp /tmpbackup
  418. # rm -rf /tmp
  419. # mkdir /tmp
  420. # mount -t tmpfs -o rw,noexec,nosuid tmpfs /tmp
  421. # chmod 1777 /tmp
  422. # echo "tmpfs /tmp tmpfs rw,noexec,nosuid 0 0" >> /etc/fstab
  423. # # Restore /tmp
  424. # cp -Rpf /tmpbackup/* /tmp/ >/dev/null 2>&1
  425. # #Remove old tmp dir
  426. # rm -rf /tmpbackup
  427. # # Backup /var/tmp and link it to /tmp
  428. # mv /var/tmp /var/tmpbackup
  429. # ln -s /tmp /var/tmp
  430. # # Copy the old data back
  431. # cp -Rpf /var/tmpold/* /tmp/ >/dev/null 2>&1
  432. # # Remove old tmp dir
  433. # rm -rf /var/tmpbackup
  434. # echo -e "\033[35;1m /tmp and /var/tmp secured using tmpfs. \033[0m"
  435. # } # End function secure_tmp_tmpfs
  436. # check_tmp_secured
  437. # if [ $? = 0 ]; then
  438. # secure_tmp_tmpfs
  439. # else
  440. # echo -e "\033[35;1mFunction canceled. /tmp already secured. \033[0m"
  441. # fi
  442. echo '\033[35m
  443. ____ __ _______ __
  444. / __ \____ / /_ / ____(_) /__ _____
  445. / / / / __ \/ __/ / /_ / / / _ \/ ___/
  446. / /_/ / /_/ / /_ / __/ / / / __(__ )
  447. /_____/\____/\__/ /_/ /_/_/\___/____/
  448. \033[0m'
  449. #installing better prompt and some goodies for root
  450. echo "\033[35;1mInstalling shell prompt for root \033[0m"
  451. sleep 3
  452. echo "cloning github.com/bachy/dotfiles-server"
  453. git clone git://github.com/bachy/dotfiles-server.git ~/.dotfiles-server && cd ~/.dotfiles-server && ./install.sh && cd ~
  454. source ~/.bashrc
  455. echo "\033[92;1mDot files installed for root, you should installed them manually for $USER\033[0m"
  456. # TODO add warning message on ssh connection if system needs updates
  457. # TODO install and configure tmux
  458. echo '\033[35m
  459. ___ __ __ __ __ __
  460. / | __ __/ /_____ / / / /___ ____/ /___ _/ /____
  461. / /| |/ / / / __/ __ \ / / / / __ \/ __ / __ `/ __/ _ \
  462. / ___ / /_/ / /_/ /_/ / / /_/ / /_/ / /_/ / /_/ / /_/ __/
  463. /_/ |_\__,_/\__/\____/ \____/ .___/\__,_/\__,_/\__/\___/
  464. /_/
  465. \033[0m'
  466. # https://www.howtoforge.com/how-to-configure-automatic-updates-on-debian-wheezy
  467. # https://www.bisolweb.com/tutoriels/serveur-vps-ovh-partie-5-installation-apticron/
  468. echo "\033[35;1mInstalling apticron \033[0m"
  469. apt-get install apticron
  470. sleep 3
  471. echo -n "Enter an email: "
  472. read email
  473. sed -ir "s/EMAIL=\"root\"/EMAIL=\"$email\"/g" /etc/apticron/apticron.conf
  474. # sed -ir "s/# DIFF_ONLY=\"1\"/DIFF_ONLY=\"1\"/g" /etc/apticron/apticron.conf
  475. sed -ir "s/# NOTIFY_NEW=\"0\"/NOTIFY_NEW=\"0\"/g" /etc/apticron/apticron.conf
  476. echo "\033[92;1mApticron installed and configured\033[0m"
  477. echo '\033[35m
  478. __
  479. ___ ____ ____/ /
  480. / _ \/ __ \/ __ /
  481. / __/ / / / /_/ /
  482. \___/_/ /_/\__,_/
  483. \033[0m'
  484. echo "\033[35;1m* * script done * * \033[0m"