- init-debian.sh:用户创建、数据包下载与校验(防路径穿越)、/data 权限归一化(私钥、ACME 存储、.env 收紧为 600)、apt/docker/sshd 配置、sudoers、SSH 密钥、证书同步定时任务,新增任务 14 首次同步证书 - data.tar.gz:不含任何证书、私钥和密码,证书由 scripts/certs.sh 从证书机拉取;gateway 面板密码改从 .env 读取,并移除含 EAB 凭据的 zerossl 解析器 - 历史已压缩,旧历史中含敏感文件
37 lines
758 B
Bash
37 lines
758 B
Bash
# /etc/profile: system-wide .profile file for the Bourne shell (sh(1))
|
|
# and Bourne compatible shells (bash(1), ksh(1), ash(1), ...).
|
|
|
|
if [ "`id -u`" -eq 0 ]; then
|
|
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
|
else
|
|
PATH="/usr/local/bin:/usr/bin:/bin"
|
|
fi
|
|
export PATH
|
|
|
|
if [ "${PS1-}" ]; then
|
|
if [ "${BASH-}" ] && [ "$BASH" != "/bin/sh" ]; then
|
|
# The file bash.bashrc already sets the default PS1.
|
|
# PS1='\h:\w\$ '
|
|
if [ -f /etc/bash.bashrc ]; then
|
|
. /etc/bash.bashrc
|
|
fi
|
|
else
|
|
if [ "`id -u`" -eq 0 ]; then
|
|
PS1='# '
|
|
else
|
|
PS1='$ '
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ -d /etc/profile.d ]; then
|
|
for i in /etc/profile.d/*.sh; do
|
|
if [ -r $i ]; then
|
|
. $i
|
|
fi
|
|
done
|
|
unset i
|
|
fi
|
|
|
|
ulimit -SHn 51200
|