#!/bin/bash
# Задание 3, Модуль 1 (HQ-SRV / BR-SRV)
read -p "Введите логин: " L
read -p "Введите пароль: " P
read -p "Введите id полльзоваелья: " I
read -p " Введите port: " Po
[ $EUID -ne 0 ] && echo "Требуется root" && exit 1

# 1. Пользователь remote_user
useradd -m remote_user 2>/dev/null

# 2. Пользователь sshuser 
useradd -u $I -m $L 2>/dev/null
echo "$L:$P" | chpasswd

# 3. Sudo без пароля для sshuser
echo "$L ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers
chmod 440 /etc/sudoers

cat > /etc/ssh/sshd_config << EOF
Port $Po
AllowUsers $L
MaxAuthTries 2
EOF

cat > /etc/selinux/config << EOF
SELINUX=disabled
SELINUX=targeted
EOF

touch /etc/ssh/ban
echo "________________________________________" > /etc/ssh/ban
echo "" >> /etc/ssh/ban
echo "Authorized access only" >> /etc/ssh/ban
echo ""
echo "________________________________________" >> /etc/ssh/ban
echo "Banner /etc/ssh/ban" >> /etc/ssh/sshd_config
systemctl restart sshd

echo "Готово"
echo ""
echo "Имя: $L"
echo "Пароль: $P"
echo "ID: $I "
echo "Port $Po"