From b37a56f42a671aecca4f81b1a04111a2a87d8fef Mon Sep 17 00:00:00 2001 From: Ze'ev Schurmann Date: Wed, 31 Jan 2024 22:33:21 +0200 Subject: [PATCH] Added own.sh for Cloudkey --- own-your-cloudkey/own.sh | 63 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 own-your-cloudkey/own.sh diff --git a/own-your-cloudkey/own.sh b/own-your-cloudkey/own.sh new file mode 100644 index 0000000..efa65e7 --- /dev/null +++ b/own-your-cloudkey/own.sh @@ -0,0 +1,63 @@ +#!/bin/bash + +### This script will allow you to own your Cloudkey Gen2 and Gen2+. + +### This is an early version 0.1... more features to come. + +### If you use this it is at your own risk. + +### I will add more features, like creating a single partition drive, +### and mounting external drives, and auto repair the sshd_config in +### the event SSH updates and overwrites the settings. + +echo "About to remove all the UniFi software. You act at your own choice." +echo "I am not responsible if anything goes wrong." +echo +echo "Type: \"I understand.\"" +read val + +if [[ $val == "I understand." ]]; then + echo "Here goes... hold thumbs..." +else + exit 1 +fi + +apt update +apt -y upgrade + +apt -y remove mongodb-clients mongodb-server-core mongodb-server uid-agent unifi-pion-gw node18 + +apt -y remove unifi-core ucore-setup-listener uck-tools ubnt-zram-swap ubnt-unifi-setup ubnt-ucp4cpp ubnt-systemhub ubnt-opencv4-libs ubnt-disk-smart-mon ustd ubnt-binmecpp ubnt-archive-keyring python3-unifi-console-protos simple-pid + +apt -y remove nginx node20 nodejs + +mkdir /usr/share/postgresql/9.6/man/man1 +touch /usr/share/postgresql/9.6/man/man1/psql.1.gz +apt -y remove postgresql-9.6 postgresql-client-9.6 postgresql-contrib-9.6 + +mkdir /usr/share/postgresql/14/man/man1 +touch /usr/share/postgresql/14/man/man1/psql.1.gz +apt -y remove postgresql-14 postgresql-client-14 + +mkdir /usr/share/postgresql/16/man/man1 +touch /usr/share/postgresql/16/man/man1/psql.1.gz +apt -y remove postgresql-16 postgresql-client-16 postgresql postgresql-common postgresql-client-common + +echo "Paste your rsa_id.pub key and press enter..." +read authorizedkey + +mkdir /root/.ssh +echo "$authorizedkey" > /root/.ssh/authorized_keys + +cat /etc/ssh/sshd_config | grep --invert-match "PermitRootLogin" > sshd_config.backup +echo "PermitRootLogin prohibit-password" >> sshd_config.backup +echo "PubkeyAuthentication yes" >> sshd_config.backup +echo "AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2" >> sshd_config.backup +rm /etc/ssh/sshd_config +cp sshd_config.backup /etc/ssh/sshd_config + +echo "Press ENTER to reboot..." + +read val + +reboot now