From 19c71705bdb581fab35b1acab2d1465fcbdee129 Mon Sep 17 00:00:00 2001
From: prokopparuzek <prokop.paruzek@paruzkovi.cz>
Date: Fri, 23 Jun 2023 11:37:35 +0200
Subject: [PATCH] ssh hardening and docker group

---
 setup.sh | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/setup.sh b/setup.sh
index 98d489e..6cc4db0 100755
--- a/setup.sh
+++ b/setup.sh
@@ -39,5 +39,18 @@ sed -e "s:__PHOTO__:$PHOTOS:" docker-compose.yml | sudo -u ubuntu tee $home/etc/
 cd $home/etc
 docker compose up -d
 
+# add user ubuntu to docker group
+usermod -a -G docker ubuntu
+
 # SSH
-# #TODO
+cat >> /etc/ssh/sshd_config <<EOF
+LoginGraceTime 42
+MaxStartups 3
+PermitRootLogin no
+StrictModes yes
+MaxAuthTries 6
+MaxSessions 10
+PasswordAuthentication no
+PubkeyAuthentication yes
+AllowUsers ubuntu
+EOF