snster bootstrap

files/snster-kaz/isp-a/infra/provision.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+# ISP-A infra
+set -e
+if [ -z $MILXCGUARD ] ; then exit 1; fi
+DIR=`dirname $0`
+cd `dirname $0`
+
+# Email's mail account email@isp-a.milxc
+useradd -m -s "/bin/bash" -p `mkpasswd --method=sha-512 email` email || true
+addgroup email mail
+#mkdir /home/hacker/mail
+#touch /home/hacker/mail/Drafts /home/hacker/mail/Queue /home/hacker/mail/Sent /home/hacker/mail/Trash
+
+# disable systemd-resolved which conflicts with nsd
+echo "DNSStubListener=no" >> /etc/systemd/resolved.conf
+systemctl stop systemd-resolved
+
+# manage isp-a.milxc zone
+apt-get update
+DEBIAN_FRONTEND=noninteractive apt-get install -y unbound
+cp dns.conf /etc/unbound/unbound.conf.d/