#!/bin/bash
set -euo pipefail
# TODO: 'sed' automate the usual hardenings
sudo vim /etc/ssh/sshd_config
if ! sudo sshd -t; then
sudo systemctl restart sshd
fi
