Added SSH changes.

auracheeze · auracheeze · commit c0dc3117d811 · 2021-07-03T15:05:32.000+08:00
diff --git a/terra/README.md b/terra/README.md
@@ -7,48 +7,22 @@ This folder contains the scripts that streamline the setting up of a validator i
 Before running any of the scripts, if you are starting from a new server as root, the first thing to do is to create a non-root user.
 
 ```
-USER=terrau
-useradd -m -s /bin/bash $USER
-usermod -aG sudo $USER
-# Set the password for the user.
-passwd $USER
+export TERRA_USER=terrau
+./root1.sh
 ```
 
-Then copy the SSH keys that the root user accepts (if any).
+Then copy the SSH keys that the root user accepts (if any) and enable the user to use `sudo` without entering a password.
 
 ```
-cp -r .ssh  /home/$USER
-chown -R $USER:$USER /home/$USER/.ssh
-chmod 644 /home/$USER/.ssh/authorized_keys
+./root2.sh
 ```
 
-Enable the user to use sudo without entering a password.
-
-```
-echo "$USER ALL=NOPASSWD: ALL" >> /etc/sudoers
-```
-
-Recommended - change the default port and remove root SSH.
-
-```
-# Port 8888
-# PermitRootLogin no
-# PasswordAuthentication no
-```
-
-Then restart the server: `systemctl restart sshd `
+This script also makes changes to SSH default configurations and extends the resource limits.
 
 Recommended - change the name of the machine to easily identify it.
 
 sudo hostname {SERVER-NAME}
 
-Extend the limits for the server by appending the following to /etc/security/limits.conf
-
-```
-*                soft    nofile          65535
-*                hard    nofile          65535
-```
-
 # start.sh
 
 This script is to be run as a user in server. It downloads and sets up the software that is needed to get the validator running.
diff --git a/terra/root1.sh b/terra/root1.sh
diff --git a/terra/root2.sh b/terra/root2.sh
@@ -1,18 +1,22 @@
 #!/bin/bash
 
-if [[ -z "${TERRA_USER}" ]]; then
+if [[ -z "${TERRA_USER}" ]]
+then
   echo "ERROR: Environment variable 'TERRA_USER' must be defined first. E.g."
   echo "    export TERRA_USER=terrau"
   exit
 fi
 
-echo "> Copying SSH keys to new user account..."
+if [[ -d /home/root/.ssh ]]
+then
+  echo "> Copying SSH keys to new user account..."
 
-cp -r .ssh  /home/$TERRA_USER
-chown -R $TERRA_USER:$TERRA_USER /home/$TERRA_USER/.ssh
-chmod 644 /home/$TERRA_USER/.ssh/authorized_keys
+  cp -r .ssh  /home/$TERRA_USER
+  chown -R $TERRA_USER:$TERRA_USER /home/$TERRA_USER/.ssh
+  chmod 644 /home/$TERRA_USER/.ssh/authorized_keys
 
-echo "  Done."
+  echo "  Done."
+fi
 
 echo "> Enabling sudo without password..."
 
@@ -27,3 +31,11 @@ echo "*                hard    nofile          65535" >> /etc/security/limits.co
 
 echo "  Done."
 
+echo "> Changing default SSH port, password login, and root configurations..."
+
+echo "Port 9560" >> /etc/ssh/sshd_config
+echo "PasswordAuthentication no" >> /etc/ssh/sshd_config
+echo "PermitRootLogin no" >> /etc/ssh/sshd_config
+systemctl restart sshd
+
+echo "  Done."
