Tips-Of-Mine/Hardening-Linux-Debian-Ubuntu
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update
All checks were successful
Deployment Verification Ubuntu / deploy-and-test (push) Successful in 2m0s
Details

Browse Source
This commit is contained in:
Hubert Cornet 2025-04-27 11:45:41 +02:00
parent 60b2e9877f
commit a2a47f9483
3 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -28,14 +28,14 @@ S'il y a un paramétrage pour le proxy, il faut être saisie dans le fichier : *
``` ```
# variables # variables
HTTP_PROXY="serveur-proxy.tips-of-mine.local" HTTP_PROXY="serv-proxy.tips-of-mine.local"
HTTPS_PROXY="serveur-proxy.tips-of-mine.local" HTTPS_PROXY="serv-proxy.tips-of-mine.local"
FTP_PROXY="serveur-proxy.tips-of-mine.local" FTP_PROXY="serv-proxy.tips-of-mine.local"
``` ```
## ssh_hardening.sh ## ssh_hardening.sh
Mise en place de la **ssh**. Mise en place de la **ssh** pour de profile **root** et des profile **non-root**.
S'il y a un paramétrage pour rajouter des clé ssh, il faut être saisie dans le fichier : **custom_key** S'il y a un paramétrage pour rajouter des clé ssh, il faut être saisie dans le fichier : **custom_key**

7
modules/firewall.sh
View File

@ -35,12 +35,13 @@ configure_ufw() {
# Allow SSH on custom port # Allow SSH on custom port
log_message "INFO" "IPv4 : Allowing SSH on port 22" log_message "INFO" "IPv4 : Allowing SSH on port 22"
ufw allow 22/tcp #ufw allow 22/tcp
ufw allow ssh
# Allow HTTP/HTTPS for web services if needed # Allow HTTP/HTTPS for web services if needed
log_message "INFO" "IPv4 : Allowing HTTP/HTTPS ports" log_message "INFO" "IPv4 : Allowing HTTP/HTTPS ports"
ufw allow 80/tcp #ufw allow 80/tcp
ufw allow 443/tcp #ufw allow 443/tcp
# Allow SNMP for monitoring # Allow SNMP for monitoring
log_message "INFO" "IPv4 : Allowing SNMP port for monitoring" log_message "INFO" "IPv4 : Allowing SNMP port for monitoring"

1
modules/ssh_hardening.sh
View File

@ -165,6 +165,7 @@ EOF
log_message "SUCCESS" "SSH service restarted successfully" log_message "SUCCESS" "SSH service restarted successfully"
else else
log_message "ERROR" "Failed to restart SSH service" log_message "ERROR" "Failed to restart SSH service"
# Revert to backup # Revert to backup
cp "$SSH_CONFIG_BACKUP" "$SSH_CONFIG" cp "$SSH_CONFIG_BACKUP" "$SSH_CONFIG"
service restart sshd service restart sshd