Adde snippits
This commit is contained in:
43
Linux/sftpSpliting.sh
Normal file
43
Linux/sftpSpliting.sh
Normal file
@@ -0,0 +1,43 @@
|
||||
###
|
||||
#Declarring vars for testing
|
||||
domain=Domain.exp
|
||||
###
|
||||
|
||||
#Pre-confiuring Env
|
||||
webname=$(sed -e 's/\.[a-z]*$//' <<< $domain)
|
||||
webname=$(sed 's/\./-/g' <<< $webname)
|
||||
apt install bindfs -y
|
||||
|
||||
|
||||
#creating SFTP-user
|
||||
groupadd $webname
|
||||
useradd $webname -g $webname
|
||||
mkdir -p /home/$webname/.ssh
|
||||
echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOtJ4ZiLi+SntA3m54oEJjlA8bE73gggkhGjOaVHsLNo6YmKtZlPaxwWiGvoATv4Vm41WWxKbUWbYGHVTe8DusqKpf/JCgB1r/8rQe828qwaEGXWGxta1Ykq+ndDeBLFGhVp0nNdcnND5HIwarEW4zhBDXUMzYw7IBxPYb48tVIobs/yPN6nSWT2G8FX7XDJNifS+ThVLnCHHS3i/uio8b8jz1oT2s6UH09EBwxg99+0yVaSQV2q8CthDZ8rSgz8pAhQ6FwVfUd9c/PQjtbUSQStvKvr3muv5Q8UnzAvKiO83rsM91aDwv0E6kqpB77BrkpfQXOJNDmdqlnsa2AlkL ICTMaatwerk@Key" >> /home/$webname/.ssh/authorized_keys
|
||||
chown -R $webname:$webname /home/$webname
|
||||
|
||||
|
||||
#creating folder and setting mount
|
||||
mkdir -p /web/$webname/html
|
||||
chmod 755 /web
|
||||
chmod 755 /web/$webname
|
||||
chown $webname:$webname /web/$webname/html
|
||||
mkdir -p /var/www/$domain
|
||||
chown www-data:www-data /var/www/$domain
|
||||
echo "bindfs#/var/www/$domain /web/$webname/html fuse force-user=${webname},force-group=${webname},create-for-user=www-data,create-for-group=www-data,create-with-perms=0770,chgrp-ignore,chown-ignore,chmod-ignore 0 0" >> /etc/fstab
|
||||
|
||||
|
||||
#Configuring sshd for SFTP only user
|
||||
sed -i 's/Subsystem\s*sftp\s*\/usr\/lib\/openssh\/sftp-server/Subsystem sftp internal-sftp/g' /etc/ssh/sshd_config
|
||||
cat <<EOF >> /etc/ssh/sshd_config
|
||||
#Begin of $webname
|
||||
Match User $webname
|
||||
ChrootDirectory /web/$webname
|
||||
ForceCommand internal-sftp
|
||||
X11Forwarding no
|
||||
AllowTcpForwarding no
|
||||
#End of $webname
|
||||
EOF
|
||||
service sshd restart
|
||||
|
||||
mount -a
|
||||
Reference in New Issue
Block a user