X-Git-Url: https://git.josue.xyz/?a=blobdiff_plain;f=ssh-adduser%2FREADME.md;h=133d22bd16575852727e03c95bd7075bd04a1dc5;hb=cd900667cb0aa8008f9335ad0bc2437023ad68e9;hp=804a1fb9d95321c5eb5afa11093b19ef58549207;hpb=92fdd2f735ecdc89760a0a474e9bf99a2a696b12;p=webi-installers%2F.git

diff --git a/ssh-adduser/README.md b/ssh-adduser/README.md
index 804a1fb..133d22b 100644
--- a/ssh-adduser/README.md
+++ b/ssh-adduser/README.md
@@ -5,5 +5,54 @@ tagline: |
   SSH adduser: Because friends don't let friends login or run stuff as root
 linux: true
 description: |
-  Many modern web programs (`npm` and `postgres`, for example) will not function correctly if run as root. `ssh-adduser` adds user `me` with the same **`~/.ssh/authorized_keys`** as the `root` user, with a long random password, and gives `me` `sudo` privileges.
+  Many modern web programs (`npm` and `postgres`, for example) will not function correctly if run as root.
+
+  `ssh-adduser` will
+
+    1. add the user `me`
+    2. sets a random, 32-character password (as a failsafe)
+    3. copy the `root` user's **`~/.ssh/authorized_keys`** (so the same users can still login)
+    4. gives the `me` user `sudo` (admin) privileges
+    5. allows `me` to `sudo` without a password
 ---
+
+How to create a new user named 'me':
+
+```bash
+# Note: --disable-password means that the user cannot yet login
+adduser --disabled-password --gecos "" me
+```
+
+How to create a and set a random password:
+
+```bash
+# store a random 16-byte password into 'my_password'
+my_password=$(openssl rand -hex 16)
+
+# use 'my_password' to set the user 'me's password
+printf "$my_password"'\n'"$my_password" | passwd me
+```
+
+How to make the user 'me' a "sudo"er (an admin):
+
+```bash
+adduser me sudo
+```
+
+How to allow 'me' to run sudo commands without a password:
+
+```bash
+echo "me ALL=(ALL:ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/me
+```
+
+How to copy allowed keys from root to the new user:
+
+```bash
+mkdir -p /home/me/.ssh/
+chmod 0700 /home/me/.ssh/
+
+cat "$HOME/.ssh/authorized_keys" >> /home/me/.ssh/authorized_keys
+chmod 0600 /home/me/.ssh/authorized_keys
+
+chown -R me:me /home/me/.ssh/
+```