int3hh/forgejo.sh

#!/usr/bin/bash
# hello world 2

HOST="$1"
USERNAME="$2"
GPWD="changeme"

if [ -z "$HOST" ] || [ -z "$USERNAME" ]; then
    echo "USAGE: sprovision.sh HOST USER"
    exit 1
fi

ssh root@$HOST /bin/bash <<EOF
    apt-get update
    apt-get upgrade -y
    apt-get dist-upgrade -y
    apt -y install doas openssl vim rsync git uidmap slirp4netns git-lfs jq
    useradd -m -p \$(openssl passwd -1 "$GPWD") -s /bin/bash -c "$USERNAME" "$USERNAME"
    echo "permit persist $USERNAME as root" >> /etc/doas.conf
    mkdir -p /home/$USERNAME/.ssh
    cp /root/.ssh/authorized_keys /home/$USERNAME/.ssh/
    chmod 600 /home/$USERNAME/.ssh/authorized_keys
    chmod 700 /home/$USERNAME/.ssh
    chown -R $USERNAME:$USERNAME /home/$USERNAME
    sed -i '/^PermitRootLogin /c\PermitRootLogin no' /etc/ssh/sshd_config
    sed -i 's/^#\?PasswordAuthentication \(yes\|no\)/PasswordAuthentication no/' /etc/ssh/sshd_config
    systemctl restart sshd
    apt -y install podman podman-compose
    loginctl enable-linger $USERNAME
    echo "unset HISTFILE" >> /home/$USERNAME/.bashrc
    echo 'net.ipv4.ip_unprivileged_port_start=80' | tee -a /etc/sysctl.conf
    echo 'net.ipv4.ip_unprivileged_port_start=443' | tee -a /etc/sysctl.conf
    sysctl -p
EOF