gsadmin/Invoke-OpenSSHConfiguration
1
0
Fork 0
mirror of https://github.com/Grace-Solutions/Invoke-OpenSSHConfiguration.git synced 2026-07-26 11:38:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use __PROGRAMDATA__ variable in sshd_config and limit backups to 3

Browse Source 
- TrustedUserCAKeys now uses __PROGRAMDATA__/ssh/... (portable path)
- Backup cleanup: keeps only the last 3 sshd_config backups
- Removes older backups automatically after creating new one
This commit is contained in:
GraceSolutions
2026-05-04 10:35:18 -04:00
parent c10b19fa6e
commit b0a68e3324
1 changed files with 28 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Invoke-OpenSSHConfiguration.ps1
+28 -3
View File
@@ -553,6 +553,27 @@ Switch (Test-ProcessElevationStatus)
$Null = [System.IO.File]::Copy($SSHDConfigPath.FullName, $SSHDConfigBackupPath.FullName, $True) $Null = [System.IO.File]::Copy($SSHDConfigPath.FullName, $SSHDConfigBackupPath.FullName, $True)
$WriteLogMessage.Invoke(0, @("Backup created successfully.")) $WriteLogMessage.Invoke(0, @("Backup created successfully."))
#region Cleanup Old Backups (Keep Last 3)
$BackupFilePattern = 'sshd_config.backup.*'
$BackupsToKeep = 3
$ExistingBackups = Get-ChildItem -Path $OpenSSHProgramDataDirectory.FullName -Filter $BackupFilePattern -File -ErrorAction SilentlyContinue | Sort-Object -Property @('LastWriteTime') -Descending
Switch (($ExistingBackups | Measure-Object).Count -gt $BackupsToKeep)
{
{($_ -eq $True)}
{
$BackupsToRemove = $ExistingBackups | Select-Object -Skip $BackupsToKeep
ForEach ($BackupToRemove In $BackupsToRemove)
{
$WriteLogMessage.Invoke(0, @("Removing old backup `"$($BackupToRemove.Name)`"."))
$Null = [System.IO.File]::Delete($BackupToRemove.FullName)
}
}
}
#endregion
#endregion #endregion
$SSHDConfigContent = [System.IO.File]::ReadAllText($SSHDConfigPath.FullName) $SSHDConfigContent = [System.IO.File]::ReadAllText($SSHDConfigPath.FullName)
@@ -659,14 +680,18 @@ Switch (Test-ProcessElevationStatus)
{ {
{($_ -eq $True)} {($_ -eq $True)}
{ {
[System.IO.FileInfo]$CABundlePath = [System.IO.Path]::Combine($OpenSSHProgramDataDirectory.FullName, 'OpenSSH-TrustedCertificateAuthorities-LocalMachine.pem') $CABundleFileName = 'OpenSSH-TrustedCertificateAuthorities-LocalMachine.pem'
[System.IO.FileInfo]$CABundlePath = [System.IO.Path]::Combine($OpenSSHProgramDataDirectory.FullName, $CABundleFileName)
#Use __PROGRAMDATA__ variable for sshd_config (portable path)
$CABundleConfigPath = "__PROGRAMDATA__/ssh/$($CABundleFileName)"
Switch ($CABundlePath.Exists) Switch ($CABundlePath.Exists)
{ {
{($_ -eq $True)} {($_ -eq $True)}
{ {
$TrustedCAKeysPattern = '(?m)^#?\s*TrustedUserCAKeys\s+.*$' $TrustedCAKeysPattern = '(?m)^#?\s*TrustedUserCAKeys\s+.*$'
$TrustedCAKeysReplacement = "TrustedUserCAKeys $($CABundlePath.FullName)" $TrustedCAKeysReplacement = "TrustedUserCAKeys $($CABundleConfigPath)"
Switch ($SSHDConfigContent -imatch $TrustedCAKeysPattern) Switch ($SSHDConfigContent -imatch $TrustedCAKeysPattern)
{ {
@@ -674,7 +699,7 @@ Switch (Test-ProcessElevationStatus)
{ {
$SSHDConfigContent = [System.Text.RegularExpressions.Regex]::Replace($SSHDConfigContent, $TrustedCAKeysPattern, $TrustedCAKeysReplacement) $SSHDConfigContent = [System.Text.RegularExpressions.Regex]::Replace($SSHDConfigContent, $TrustedCAKeysPattern, $TrustedCAKeysReplacement)
$SSHDConfigModified = $True $SSHDConfigModified = $True
$WriteLogMessage.Invoke(0, @("Configured TrustedUserCAKeys to `"$($CABundlePath.FullName)`".")) $WriteLogMessage.Invoke(0, @("Configured TrustedUserCAKeys to `"$($CABundleConfigPath)`"."))
} }
Default Default