# 修复新机器 SSH 认证
$serverKey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCm/leXfpZ1Ycm7uL3sXYU1Hp5TO42EqUnD5H7SwveTIusF14e5oZf5P72fttGLIxQMFgGdXzu4+coWPmpGsUHjqm4g0FbeL+mjM+0cnqeggoueoFm3dk9y+9jaogjuR2VY9oqbdOvD+L0IfvS+t6WJrYif1MdXOYnH5MfNYtrLb/MWCDiTT4w/Cw0QKSSB3S3+nvYqxD1Ep+wdLrd+SfgiMi2qU/bO7ccEgXwjqiI/4LDHh2r5oajkvdRSuQ75PLSRdFfR+aq/NcV/NJE3YOcb8wVhvVjZZSXQyy8PlqLn6N58qckharwAj6vRxC9CbWB+XDrLOMWOtdq7T7iBPJmy1wVDDyva9wEnKiprdXf+2F/Q57SJjcbPTCt6TqXggQ0hVf7tOK6Wefk5dwPW0P3mdzPTp91s9iU96kM+9VSY0dhKEnim+6IncxEK+hnbAbGOX66MuRmK9u7dYlsjhFq345rNXmkXIIY3VU2GuCBLB4bk88pNubrd8y9S03JbZIU= root@vps21249823.hosteons.com"

# 1. 用户 authorized_keys
$userKeys = "$env:USERPROFILE\.ssh\authorized_keys"
if (!(Test-Path "$env:USERPROFILE\.ssh")) {
    New-Item -ItemType Directory -Path "$env:USERPROFILE\.ssh" -Force
}
Add-Content -Path $userKeys -Value $serverKey
icacls $userKeys /inheritance:r
icacls $userKeys /grant:r "${env:USERNAME}:(F)"
icacls $userKeys /grant "SYSTEM:(R)"

# 2. 管理员 authorized_keys
$adminKeys = "C:\ProgramData\ssh\administrators_authorized_keys"
if (!(Test-Path $adminKeys)) {
    New-Item -ItemType File -Path $adminKeys -Force
}
Add-Content -Path $adminKeys -Value $serverKey
icacls $adminKeys /inheritance:r
icacls $adminKeys /grant "SYSTEM:(F)"
icacls $adminKeys /grant "BUILTIN\Administrators:(F)"

# 3. 重启 SSH Server
Restart-Service sshd

Write-Host "修复完成！" -ForegroundColor Green