46 lines
1.6 KiB
Plaintext
46 lines
1.6 KiB
Plaintext
|
#!/bin/bash
|
||
|
|
|
||
|
|
sudo clear
|
||
|
|
echo "Installing firewall and remote access tools..."
|
||
|
|
sudo apt install -y --ignore-missing ssh openssh-server openssl xrdp cockpit ufw fail2ban portsentry libapache2-mod-security2 snort remmina avahi-daemon #guacamole
|
||
|
|
wget https://servzero.net/arc/tools/f2b/jail.local; sudo mv jail.local /etc/fail2ban/
|
||
|
|
wget https://servzero.net/arc/tools/f2b/ufw.f2b.conf; sudo mv ufw.f2b.conf /etc/fail2ban/filter.d/
|
||
|
|
sudo cp /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf; sudo sh -c 'echo "SecRuleEngine On" >> /etc/modsecurity/modsecurity.conf'
|
||
|
|
sudo ufw allow ssh
|
||
|
|
sudo ufw allow http
|
||
|
|
sudo ufw allow https
|
||
|
|
sudo ufw allow 9090
|
||
|
|
sudo ufw enable
|
||
|
|
echo "DONE."
|
||
|
|
read -n1
|
||
|
|
|
||
|
|
echo 'Installing webstack (LAMP)...'
|
||
|
|
sudo apt update
|
||
|
|
sudo apt install -y --ignore-missing apache2 mariadb-server php libapache2-mod-php php-mysql php-sqlite3 phpmyadmin snap snapd #adminer
|
||
|
|
#sudo apt install -y certbot python3-certbot-apache
|
||
|
|
sudo snap install certbot --classic
|
||
|
|
sudo ln -s /snap/bin/certbot /usr/bin/certbot
|
||
|
|
sudo service apache2 start
|
||
|
|
sudo service mariadb start
|
||
|
|
sudo mysql_secure_installation
|
||
|
|
#sudo echo 'Include /etc/phpmyadmin/apache.conf' >> /etc/apache2/apache2.conf
|
||
|
|
sudo mysql -u root -p<< CMD
|
||
|
|
CREATE USER 'webroot'@'localhost' IDENTIFIED BY 'w3bp4ssw0rd';
|
||
|
|
GRANT ALL PRIVILEGES ON *.* TO 'webroot'@'localhost' WITH GRANT OPTION;
|
||
|
|
FLUSH PRIVILEGES;
|
||
|
|
CMD
|
||
|
|
echo ''
|
||
|
|
echo 'LOGIN PAGE:'
|
||
|
|
echo 'http://127.0.0.1/phpmyadmin'
|
||
|
|
echo 'http://localhost/phpmyadmin'
|
||
|
|
echo 'USER: webroot'
|
||
|
|
echo 'PASSWORD: w3bp4ssw0rd'
|
||
|
|
echo ''
|
||
|
|
echo 'Done.'
|
||
|
|
read -n1
|
||
|
|
|
||
|
|
echo 'Installing Mumble and ejabberd...'
|
||
|
|
sudo apt install -y --ignore-missing mumble mumble-server ejabberd
|
||
|
|
echo 'Done.'
|
||
|
|
read -n1
|