app/templates/disable_root_setup.j2

#!/bin/bash
# Disable root login setup script

# Disable root SSH login
sudo sed -i 's/#PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config
sudo systemctl restart sshd

# Create a new user if needed
# sudo useradd -m -s /bin/bash newuser
# sudo usermod -aG sudo newuser