#!/bin/bash

# 禁用防火墙
systemctl stop firewalld.service
systemctl disable firewalld.service

# 获取新的SSH端口号
read -p "请输入新的SSH端口号：" port

# 修改SSH端口号
sed -i "s/#Port 22/Port $port/g" /etc/ssh/sshd_config

# 是否禁止root用户登录
while true; do
    read -p "是否禁止root用户登录(y/n)：" yn
    case $yn in
        [Yy]* ) sed -i 's/#PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config; break;;
        [Nn]* ) break;;
        * ) echo "请输入 y 或 n";;
    esac
done

# 重启SSH服务
systemctl restart sshd.service