#!/bin/bash

set -euo pipefail

# TODO: just 'sed' the usual hardenings
sudo vim /etc/ssh/sshd_config

if ! sudo sshd -t; then
    sudo systemctl restart sshd
fi