# Windows SSH Server 公钥认证配置脚本

$adminKeys = "C:\ProgramData\ssh\administrators_authorized_keys"
$serverKey = "ssh-rsa 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 root@vps21249823.hosteons.com"

Write-Host "=== 配置 Windows SSH Server 公钥认证 ===" -ForegroundColor Cyan
Write-Host ""

# 步骤 1: 写入公钥
Write-Host "步骤 1/3: 写入服务器公钥" -ForegroundColor Yellow
Set-Content -Path $adminKeys -Value $serverKey -Force
Write-Host "✓ 公钥已写入到 $adminKeys" -ForegroundColor Green
Write-Host ""

# 步骤 2: 设置权限
Write-Host "步骤 2/3: 设置文件权限" -ForegroundColor Yellow
icacls $adminKeys /inheritance:r | Out-Null
icacls $adminKeys /grant "SYSTEM:(F)" | Out-Null
icacls $adminKeys /grant "BUILTIN\Administrators:(F)" | Out-Null
Write-Host "✓ 权限已设置" -ForegroundColor Green
Write-Host ""

# 步骤 3: 重启 SSH Server
Write-Host "步骤 3/3: 重启 SSH Server" -ForegroundColor Yellow
Restart-Service sshd
Write-Host "✓ SSH Server 已重启" -ForegroundColor Green
Write-Host ""

# 验证
Write-Host "=== 验证配置 ===" -ForegroundColor Cyan
Write-Host "文件内容："
Get-Content $adminKeys
Write-Host ""
Write-Host "配置完成！" -ForegroundColor Green