#!/bin/sh

if [ -z "$1" ] ; then
	echo "error: must specify configuration file to use"
	exit 5
fi

. ./"$1"

ssh -T $ssh << EOSSH

apt update || exit 5
apt upgrade -y || exit 10
apt install -y tmux ufw curl || exit 15

sed -i '/PubkeyAuthentication/c\PubkeyAuthentication yes' /etc/ssh/sshd_config
sed -i '/PasswordAuthentication/c\PasswordAuthentication no' /etc/ssh/sshd_config
sed -i '/PermitRootLogin/c\PermitRootLogin prohibit-password' /etc/ssh/sshd_config
systemctl restart sshd

ufw allow ssh || exit 20
yes | ufw enable

EOSSH