mirror of
https://github.com/chatmail/relay.git
synced 2026-05-17 19:08:57 +00:00
Delete ssh connection from docker installation
- https://github.com/chatmail/relay/pull/614#discussion_r2269986372 - https://github.com/chatmail/relay/pull/614#discussion_r2269991175 - https://github.com/chatmail/relay/pull/614#discussion_r2269995037 - https://github.com/chatmail/relay/pull/614#discussion_r2270004922
This commit is contained in:
@@ -18,8 +18,6 @@ RUN echo 'APT::Install-Recommends "0";' > /etc/apt/apt.conf.d/01norecommend && \
|
|||||||
|
|
||||||
RUN apt-get update && \
|
RUN apt-get update && \
|
||||||
apt-get install -y \
|
apt-get install -y \
|
||||||
openssh-client \
|
|
||||||
openssh-server \
|
|
||||||
git \
|
git \
|
||||||
python3 \
|
python3 \
|
||||||
python3-venv \
|
python3-venv \
|
||||||
@@ -54,23 +52,6 @@ RUN apt-get update && \
|
|||||||
done \
|
done \
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
RUN systemctl enable \
|
|
||||||
ssh \
|
|
||||||
fcgiwrap
|
|
||||||
|
|
||||||
RUN sed -i 's/^#PasswordAuthentication .*/PasswordAuthentication no/' /etc/ssh/sshd_config && \
|
|
||||||
sed -i 's/^#PermitRootLogin .*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config && \
|
|
||||||
ssh-keygen -P "" -t rsa -b 2048 -f /root/.ssh/id_rsa && \
|
|
||||||
mkdir -p /root/.ssh && \
|
|
||||||
cat /root/.ssh/id_rsa.pub >> /root/.ssh/authorized_keys && \
|
|
||||||
SSH_USER_CONFIG="/root/.ssh/config" && \
|
|
||||||
echo "Host localhost" > "$SSH_USER_CONFIG" && \
|
|
||||||
echo " HostName localhost" >> "$SSH_USER_CONFIG" && \
|
|
||||||
echo " User root" >> "$SSH_USER_CONFIG" && \
|
|
||||||
echo " StrictHostKeyChecking no" >> "$SSH_USER_CONFIG" && \
|
|
||||||
echo " UserKnownHostsFile /dev/null" >> "$SSH_USER_CONFIG"
|
|
||||||
## TODO: deny access for all insteed root form 127.0.0.1 https://unix.stackexchange.com/a/406264
|
|
||||||
|
|
||||||
WORKDIR /opt/chatmail
|
WORKDIR /opt/chatmail
|
||||||
|
|
||||||
ARG SETUP_CHATMAIL_SERVICE_PATH=/lib/systemd/system/setup_chatmail.service
|
ARG SETUP_CHATMAIL_SERVICE_PATH=/lib/systemd/system/setup_chatmail.service
|
||||||
|
|||||||
@@ -70,7 +70,7 @@ fi
|
|||||||
./scripts/cmdeploy init --config "${INI_FILE}" $INI_CMD_ARGS $MAIL_DOMAIN
|
./scripts/cmdeploy init --config "${INI_FILE}" $INI_CMD_ARGS $MAIL_DOMAIN
|
||||||
bash /update_ini.sh
|
bash /update_ini.sh
|
||||||
|
|
||||||
./scripts/cmdeploy run --ssh-host localhost --skip-dns-check
|
./scripts/cmdeploy run --ssh-host docker --skip-dns-check
|
||||||
|
|
||||||
echo "ForwardToConsole=yes" >> /etc/systemd/journald.conf
|
echo "ForwardToConsole=yes" >> /etc/systemd/journald.conf
|
||||||
systemctl restart systemd-journald
|
systemctl restart systemd-journald
|
||||||
|
|||||||
Reference in New Issue
Block a user