added AllowUsers to tighten security

.gitattributes

@@ -0,0 +1,51 @@
+# Common settings that generally should always be used with your language specific settings
+
+# Auto detect text files and perform LF normalization
+# http://davidlaing.com/2012/09/19/customise-your-gitattributes-to-become-a-git-ninja/
+* text=auto
+
+#
+# The above will handle all files NOT found below
+#
+
+# Documents
+*.doc	 diff=astextplain
+*.DOC	 diff=astextplain
+*.docx diff=astextplain
+*.DOCX diff=astextplain
+*.dot  diff=astextplain
+*.DOT  diff=astextplain
+*.pdf  diff=astextplain
+*.PDF	 diff=astextplain
+*.rtf	 diff=astextplain
+*.RTF	 diff=astextplain
+*.md text
+*.tex text
+*.adoc text
+*.textile text
+*.mustache text
+*.csv text
+*.tab text
+*.tsv text
+*.sql text
+
+# Graphics
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.tif binary
+*.tiff binary
+*.ico binary
+# SVG treated as an asset (binary) by default. If you want to treat it as text,
+# comment-out the following line and uncomment the line after.
+*.svg binary
+#*.svg text
+*.eps binary
+
+#
+# Exclude files from exporting
+#
+
+.gitattributes export-ignore
+.gitignore export-ignore

README.md

@@ -8,21 +8,27 @@ conceivable installation are included here.
 
 This archive and included script are meant to supplement my article on setting
 up a Debian base-system found at my blog: [My
-Techie-Thoughts](https://mytechiethoughts.com/<post_address>)
+Techie-Thoughts](https://mytechiethoughts.com/setting-up-a-debian-base-system/)
 
 ## Included files
 
 Please refer to the `readme.md` in each subdirectory for a list and description of
 each included file.
 
+Presently, configurations are included for:
+
+- BASH profiles (including aliases and custom prompt)
+- SSHd (OpenSSH server)
+- timesyncd (systemd-timesyncd configuration)
+
 ## The script file (customize.sh)
 
 The included script file copies all the files in this archive to the proper
-locations on a default Debian Stretch system.  It makes backups of your existing
+locations on a **default** Debian Stretch system.  It makes backups of your
-files in-place with the extension *.original*.  This simply saves you time and
+existing files in-place with the extension *.original*.  This simply saves you
-possible errors copying the files manually.  The structure of this archive
+time and possible errors copying the files manually.  The structure of this
-exactly mirrors a default Debian installation, so you can use that as a guide if
+archive exactly mirrors a default Debian installation, so you can use that as a
-you choose not to use the script.
+guide if you choose not to use the script.
 
 ### Running the script
 
@@ -78,7 +84,7 @@ and will NOT update your actual system!
 
 ## Final thoughts
 
-Hopefully this saves you some time and helps you standard your new system setups
+Hopefully this saves you some time and helps you standardize your new system setups
 with a few useful defaults.  As always, if you have suggestions or want to leave
 feedback for me, please do so on my [blog
-post](https://mytechiethoughts.com/<post_address>) related to this script!
+post](https://mytechiethoughts.com/setting-up-a-debian-base-system/) related to this script!

config/etc/readme.md

@@ -1,17 +1,17 @@
 # /etc: Included files
 
-Three files are updated in the */etc* folder.
+The following are updated in the */etc* folder.
 
 ## BASH default profile (profile)
 
 This is the Debian Stretch default *profile* and is copied to */etc/profile* to
 return accounts to a baseline configuration.  Again, this is done to ensure that
-only */etc/bash.bashrc* is providing initial customizations to users.
+only */etc/bash.bashrc* is providing initial customization to users.
 
 ## Default BASH settings (bash.bashrc)
 
 Of the bash customization files, this is the only one that is NOT in a default
-configuration. I have added the following customizations I find useful
+configuration. I have added the following which I find useful
 especially for new users and system admins:
 
 - colourized directory listings with built-in automatic colour settings
@@ -40,7 +40,7 @@ and new users/admins.
 - always display line numbers
 - constantly display cursor position at the bottom of the screen
 - set vim lock-files
-- autoindent ON
+- auto-indent ON
 - tab-size of 4 spaces
 - convert tabs to spaces
 - turn off hard line wrapping
@@ -53,6 +53,7 @@ and new users/admins.
 
 binding|function
 ---|---
+ctrl-s/ctrl-S|save current file
 alt-c/alt-C|copy selected text
 alt-x/alt-X|cut selected text
 alt-v/alt-V|paste text on clipboard

config/etc/ssh/readme.md

@@ -19,7 +19,7 @@ The commented lines indicate the *recommended settings* and appear directly
 before the setting currently enabled that should be changed (i.e. line removed
 and replaced with the commented line above it).
 
-Please see my post at [My Techie-Thoughts](https://mytechiethoughts.com/<post_address) for detailed
+Please see my post at [My Techie-Thoughts](https://mytechiethoughts.com/setting-up-ssh-with-ed25519-user-and-host-keys-for-easy-secure-access/) for detailed
 instructions on setting up a secure SSH server.
 
 ## Banner file (banner)
@@ -33,6 +33,6 @@ used.  You can delete/change/replace it freely.  It is referenced in the
 #Banner /etc/ssh/banner
 ```
 
-If you want to use the banner file, edit it as desired then uncomment this line
+If you want to use the banner file, edit it as desired then un-comment this line
 in your *sshd_config*.  If you do not want a banner displayed, simply leave this
 line commented (as-is) in your configuration.

config/etc/ssh/sshd_config

@@ -27,6 +27,9 @@ MaxAuthTries 3
 MaxSessions 5
 #PermitRootLogin no
 PermitRootLogin yes
+# note: 'AllowUsers' overrides 'PermitRootLogin' so list root here
+# if you want root to have access!
+AllowUsers root username username2
 
 ### Program settings
 #Banner /etc/ssh/banner

config/etc/systemd/readme.md

@@ -11,8 +11,7 @@ space delimited.
 I've set the defaults in this file to be the worldwide NTP.org servers.  This
 should work for pretty much anyone that uses this file, but you *really should*
 customize the list to use geographically closer timeservers (check out the list
-[here](http://support.ntp.org/bin/view/Servers/NTPPoolServers)) or the
+[here](https://www.ntppool.org/zone/@)) or the timeserver on your LAN, etc.
-timeserver on your LAN, etc.
 
 When you're done editing this file, make sure you restart the *timesyncd
 service* and check it's status to verify it is now using one of your defined NTP

customize.sh

@@ -5,7 +5,8 @@
 ### original files
 ###
 ### Script by: Asif Bacchus for mytechiethoughts.com
-### Exclusively available from git.asifbacchus.app
+### Exclusively available from:
+###     https://git.asifbacchus.app/asif/DebianConfigs
 ### Some rights reserved.
 ###
 ### Anyone is allowed to use and alter this script and any or all accompanying