fluencelabs/tendermint
1
0
Fork 0
mirror of https://github.com/fluencelabs/tendermint synced 2025-05-22 19:01:19 +00:00
Code Issues Projects Releases Wiki Activity

comment out logwatch

Browse Source
This commit is contained in:
Jae Kwon 2015-05-14 17:43:29 -07:00
parent 9e1c054f87
commit 4ba09ecdbd
1 changed files with 2 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
INSTALL/install_env.sh
View File

@ -9,32 +9,8 @@ then
fi fi
USER="tmuser" USER="tmuser"
ADMIN_EMAIL="ENTER_ADMIN_EMAIL"
OPEN_PORTS=(46656 46657 46658 46659 46660 46661 46662 46663 46664 46665 46666 46667 46668 46669 46670 46671) OPEN_PORTS=(46656 46657 46658 46659 46660 46661 46662 46663 46664 46665 46666 46667 46668 46669 46670 46671)
SSH_PORT=20 SSH_PORT=20
SSH_CONFIG="Port 20
Protocol 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
UsePrivilegeSeparation yes
KeyRegenerationInterval 3600
ServerKeyBits 1024
SyslogFacility AUTH
LogLevel INFO
LoginGraceTime 120
PermitRootLogin no
StrictModes yes
RSAAuthentication yes
PubkeyAuthentication yes
IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
PasswordAuthentication no
"
WHITELIST=() WHITELIST=()
# update and upgrade # update and upgrade
@ -52,13 +28,6 @@ apt-get install -y make screen gcc git mercurial libc6-dev pkg-config libgmp-dev
# set up firewall # set up firewall
echo "ENABLE FIREWALL ..." echo "ENABLE FIREWALL ..."
# copy in the ssh config with locked down settings
if [ "$SSH_CONFIG" != "" ]; then
echo "$SSH_CONFIG" > /etc/ssh/sshd_config
service ssh restart
else
echo "Skipping over sshd_config rewrite"
fi
# white list ssh access # white list ssh access
for ip in "${WHITELIST[@]}"; do for ip in "${WHITELIST[@]}"; do
ufw allow from $ip to any port $SSH_PORT ufw allow from $ip to any port $SSH_PORT
@ -74,8 +43,8 @@ done
ufw enable ufw enable
# watch the logs and have them emailed to me # watch the logs and have them emailed to me
apt-get install -y logwatch # apt-get install -y logwatch
echo "/usr/sbin/logwatch --output mail --mailto $ADMIN_EMAIL --detail high" >> /etc/cron.daily/00logwatch # echo "/usr/sbin/logwatch --output mail --mailto $ADMIN_EMAIL --detail high" >> /etc/cron.daily/00logwatch
# set up user account # set up user account
echo "CREATE USER $USER ..." echo "CREATE USER $USER ..."