diff --git a/how-to-configure-hardened-raspberry-pi/secure-ssh.sh b/how-to-configure-hardened-raspberry-pi/secure-ssh.sh index b271e35..8e6da23 100644 --- a/how-to-configure-hardened-raspberry-pi/secure-ssh.sh +++ b/how-to-configure-hardened-raspberry-pi/secure-ssh.sh @@ -6,9 +6,9 @@ set -e mkdir ~/.ssh -cat << "_EOF" > ~/.ssh/authorized_keys -ssh-rsa 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 pi -_EOF +cat << "EOF" > ~/.ssh/authorized_keys +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHLwQ2fk5VvoKJ6PNdJfmtum6fTAIn7xG5vbFm0YjEGY pi +EOF sudo sed -i -E 's/^(#)?PermitRootLogin (prohibit-password|yes)/PermitRootLogin no/' /etc/ssh/sshd_config sudo sed -i -E 's/^(#)?PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config diff --git a/how-to-configure-hardened-raspberry-pi/secure-ssh.sh.asc b/how-to-configure-hardened-raspberry-pi/secure-ssh.sh.asc index e54fd2d..938da82 100644 --- a/how-to-configure-hardened-raspberry-pi/secure-ssh.sh.asc +++ b/how-to-configure-hardened-raspberry-pi/secure-ssh.sh.asc @@ -1,16 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iQIzBAABCgAdFiEEqYzNEiJDZVsm+vthH6dnhiu9EwUFAmCeoNIACgkQH6dnhiu9 -EwVAqxAAjs26tCvOwo6UeErcyDmGPgZkZM0MioEKdjqfk3Fz94mWE2Hdx+9r4a+6 -XQj6CRN/Ejfv78vJ9yToUJsoJ5gHIE02Gi3Ry30SQl8UpOPH3yYsDx26xkNTXY0Z -WRGhvk85UAS1nAr/gcDEQ+4lJNX3/DARW3MEjYQZW+MfCosk4/I1TvOp5Z5mj4OH -vJezIN9qiVcnSRb1AYmuuxQ2Gf5eJwPLZ5UWO5lTCKwtlWAP66LmY2XuFSs8zVmB -gMwUNRpeUECFS2wCSbwMdJeEvwbCshR/jeeG4uDT1ODluv+HOBecsXq+T+KhJT+f -msQ76O6lpL6kLb+dSYKTsSGEn1PvuP4qg6fV4OxjfnBsAhBNNck2U9KtSl7Qdcb6 -2Df+3eP7vj2Ogu7TULbVAwUAdVnWEbrw+g66X21OPNQdTS3/a2aXZ06uFToff9i4 -FAP+JN21rG0Auzsmq4rw/Z6CVqBDO0mfzav8Jux1uQNSSmj8YcaToFGcMXvLXiwn -f3UjGUhaM+p/gA70Z/coDOCsZ/ugY6RzQTJOfr9hsJbb+6zl1gn8MvprwCR8YSBq -8+PSeQji5Qt4lxc3DMWKMm73HCItgjxTglatOO/xEBsxcVEhgdmv93lG7rJjEcDS -sWfFi2YEpPnOOcp+4I/Zutv+iFQzCdip/KmG2jWVbv5XO7IemFg= -=8kHu +iHUEABYKAB0WIQSceIfhtfy84t/tDhwCxDrQctV3gwUCYdnU3wAKCRACxDrQctV3 +gxYiAP4mHFR38ZZOJw40sPoODNwJMSI16ocr1WZFyU8uRACyhAD+N0ZpIvRry//6 +kw1GUp90/0XZYymrpNGPnMeSB7WmaAk= +=BcM9 -----END PGP SIGNATURE-----