matthew/project_tunnelfin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

modified: init.sh

Browse Source
This commit is contained in:
Matthew Fisher 2024-07-29 19:15:45 -05:00
parent 075a64728b
commit 2534c36844
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
init.sh
View File

@ -1,28 +1,38 @@
#!/bin/bash #!/bin/bash
#Nginx Repo setup #Nginx Repo setup
echo '[#] Installing pre-requisites'
sudo apt install -y curl gnupg2 ca-certificates lsb-release debian-archive-keyring git sudo apt install -y curl gnupg2 ca-certificates lsb-release debian-archive-keyring git
echo '[#] NGINX Repo setup'
curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
echo '[#] Updating APT cache'
sudo apt update sudo apt update
#Crowdsec Repo setup #Crowdsec Repo setup
echo '[#] Crowdsec Repo setup'
curl -s https://install.crowdsec.net | sudo sh curl -s https://install.crowdsec.net | sudo sh
#Package install #Package install
sudo apt install iptables rsyslog nginx crowdsec crowdsec-firewall-bouncer-iptables wireguard echo '[#] Installing packages'
sudo apt install -y iptables rsyslog nginx crowdsec crowdsec-firewall-bouncer-iptables wireguard
#rsyslog setup #rsyslog setup
echo '*.* 10.0.100.34:514' | sudo tee /etc/rsyslog.conf echo '[#] syslog forwarder setup'
echo '*.* 10.0.100.34:514' | sudo tee /etc/rsyslog.conf > /dev/null
sudo systemctl enable rsyslog sudo systemctl enable rsyslog
sudo systemctl start rsyslog sudo systemctl start rsyslog
#Crowdsec setup #Crowdsec setup
echo '[#] Enroling endpoint into Crowdsec console'
sudo cscli console enroll -e context clz7m6x9o0003jo08v8g6lm0v sudo cscli console enroll -e context clz7m6x9o0003jo08v8g6lm0v
#Add authorized keys to user matthew #Add authorized keys to user matthew
cp authorized_keys ~/.ssh/authorized_keys echo '[#] Adding ssh keys'
mkdir ~/.ssh
curl http://git.lan.fisherhome.xyz/matthew/project_tunnelfin/raw/branch/main/authorized_keys > ~/.ssh/authorized_keys
#Start wireguard service #Start wireguard service
echo '[#] Starting Wireguard service'
sudo systemctl enable --now wg-quick@wg0 sudo systemctl enable --now wg-quick@wg0