#requires -RunAsAdministrator
# 为 houzi 用户配置 SSH 公钥认证

$serverKey = "ssh-rsa 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 root@vps21249823.hosteons.com"
$houziKeys = "C:\Users\houzi\.ssh\authorized_keys"

Write-Host "配置 houzi 用户 SSH 公钥认证..." -ForegroundColor Cyan

# 创建 .ssh 目录
New-Item -ItemType Directory -Path "C:\Users\houzi\.ssh" -Force | Out-Null

# 写入公钥（ASCII 无 BOM）
[System.IO.File]::WriteAllBytes($houziKeys, [System.Text.Encoding]::ASCII.GetBytes($serverKey + "`n"))

# 设置权限
icacls $houziKeys /inheritance:r | Out-Null
icacls $houziKeys /grant "houzi:(F)" | Out-Null
icacls $houziKeys /grant "SYSTEM:(R)" | Out-Null

# 重启 SSH Server
Restart-Service sshd -Force

Write-Host "完成！" -ForegroundColor Green
Write-Host ""
Write-Host "验证:" -ForegroundColor Yellow
Get-Content $houziKeys