fix(ssh): robust restart helper and use it for ssh restarts

2025-10-03 11:35:53 +02:00
parent 1a67acaafc
commit 44e0c13435
3 changed files with 45 additions and 7 deletions
--- a/lib/security.sh
+++ b/lib/security.sh
@@ -119,12 +119,15 @@ harden_ssh() {
    
    # Test SSH config
    if sudo sshd -t; then
-        sudo systemctl restart sshd
-        log_success "SSH hardened successfully."
+        if restart_ssh_service; then
+            log_success "SSH hardened successfully."
+        else
+            log_warning "SSH configuration valid but failed to restart service via known methods."
+        fi
    else
        log_error "SSH configuration invalid. Restoring backup."
        sudo cp "${ssh_config}.bak" "$ssh_config"
-        sudo systemctl restart sshd
+        restart_ssh_service || true
    fi
 }