#!/bin/bash

set -euo pipefail

# TODO: 'sed' automate the usual hardenings
sudo vim /etc/ssh/sshd_config

if ! sudo sshd -t; then
    sudo systemctl restart sshd
fi