perm_fixer.sh

/usr/bin/env bash
username=$1

logfile=/var/log/$username.log
touch "$logfile"
chown "$username":"$username" "$logfile"
echo "$username ALL=(ALL) NOPASSWD:/usr/sbin/reboot, /usr/bin/chage, /usr/sbin/useradd, /usr/bin/tee, /usr/sbin/userdel, /usr/bin/passwd, /usr/bin/ss, /usr/bin/getent, /usr/bin/systemctl restart dropbear.service" | sudo tee /etc/sudoers.d/"$username"-commands >/dev/null
setfacl -m u:"$username":r /etc/shadow
touch /etc/dropbear/banner.dat
chmod g+rw /etc/dropbear/banner.dat
chgrp $username /etc/dropbear/banner.dat
setfacl -m u:"$username":rw /etc/dropbear/banner.dat
setfacl -d -m u:"$username":rw /etc/security/limits.d
release=$(cat /home/$username/bot/release-id.txt)
if [ -f /home/$username/.release-id.old ]; then
  old_release=$(cat /home/$username/.release-id.old)
else
  old_release=$release
fi

curl -sSL -H "Cache-Control: no-cache, no-store, must-revalidate" -H "Expires: 0" -H "Pragma: no-cache" https://raw.githubusercontent.com/BlurryFlurry/tg-vps-manager/main/fixer-hook.sh?token="$(date +%s)" | sh -s -- "$username" "$old_release"

systemctl restart ptb@"$username".service
[ ! -e /usr/bin/menu_r ] || rm /usr/bin/menu_r
ln -s /home/"$username"/bot/menu_r /usr/bin/menu_r
chmod +x /usr/bin/menu_r