Compare commits
No commits in common. "9b70bd94808d36e86982aec108652d4f08942d68" and "d7ad1aff9d32c15af283ca45ecabfdee6e78d9a8" have entirely different histories.
9b70bd9480
...
d7ad1aff9d
@ -1,19 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
SUDOER_PSW=
|
|
||||||
pw_productiondatabase=
|
|
||||||
pw_developmentdatabase=
|
|
||||||
servicename=
|
|
||||||
service_dev="${servicename}_dev"
|
|
||||||
|
|
||||||
echo "${SUDOER_PSW}" | sudo -Su postgres psql && bash -s << 'ENDPSQL'
|
|
||||||
create database $servicename;
|
|
||||||
create user $servicename with encrypted password '$pw_productiondatabase';
|
|
||||||
grant all privileges on database $servicename to $servicename;
|
|
||||||
|
|
||||||
create database $service_dev;
|
|
||||||
create user $service_dev with encrypted password '$pw_developmentdatabase';
|
|
||||||
grant all privileges on database $service_dev to $service_dev;
|
|
||||||
ENDPSQL
|
|
||||||
|
|
||||||
exit
|
|
@ -5,15 +5,25 @@ SUDOER_PSW=
|
|||||||
function restofscript(){
|
function restofscript(){
|
||||||
USERNAMETOADD=
|
USERNAMETOADD=
|
||||||
PASSWORDTOADD=
|
PASSWORDTOADD=
|
||||||
|
echo "hello, $(whoami)"
|
||||||
useradd -m -s /bin/bash ${USERNAMETOADD}
|
useradd -m -s /bin/bash ${USERNAMETOADD}
|
||||||
|
echo "user added"
|
||||||
echo "${USERNAMETOADD}:${PASSWORDTOADD}" | chpasswd
|
echo "${USERNAMETOADD}:${PASSWORDTOADD}" | chpasswd
|
||||||
|
echo "password updated"
|
||||||
loginctl enable-linger ${USERNAMETOADD}
|
loginctl enable-linger ${USERNAMETOADD}
|
||||||
|
echo "linger enabled"
|
||||||
mkdir /home/${USERNAMETOADD}/.ssh
|
mkdir /home/${USERNAMETOADD}/.ssh
|
||||||
|
echo "user has .ssh/"
|
||||||
touch /home/${USERNAMETOADD}/authorized_keys
|
touch /home/${USERNAMETOADD}/authorized_keys
|
||||||
|
echo "user has .ssh/authorized keys"
|
||||||
cat ssh.pub >> /home/${USERNAMETOADD}/.ssh/authorized_keys
|
cat ssh.pub >> /home/${USERNAMETOADD}/.ssh/authorized_keys
|
||||||
|
echo "authorized keys should accept ssh.pub"
|
||||||
chmod 600 /home/${USERNAMETOADD}/authorized_keys
|
chmod 600 /home/${USERNAMETOADD}/authorized_keys
|
||||||
|
echo "authorized keys should be mode 600"
|
||||||
chown -R "${USERNAMETOADD}:${USERNAMETOADD}" /home/${USERNAMETOADD}/.ssh
|
chown -R "${USERNAMETOADD}:${USERNAMETOADD}" /home/${USERNAMETOADD}/.ssh
|
||||||
|
echo "correct user should own his .ssh directory. done!"
|
||||||
}
|
}
|
||||||
|
|
||||||
echo "${SUDOER_PSW}" | sudo -S bash -c "$(declare -f restofscript); restofscript"
|
echo "${SUDOER_PSW}" | sudo -S bash -c "$(declare -f restofscript); restofscript"
|
||||||
|
echo "restofscript should be done, exiting."
|
||||||
exit
|
exit
|
||||||
|
Loading…
Reference in New Issue
Block a user