Grant root privileges to "admin" and establish an SSH connection

Community Support Users
1

Hello everyone, is it advisable to grant sudo privileges to an “admin” user from HestiaCP and manage website directories? Will I still be restricted by chroot? I’m asking because I want to disable root login without creating a separate user with identical permissions.

2

Create a new user that does not exists in Hestia and grant that user sudo permissions

3

That’s what I don’t want to do :slight_smile:

4

Granting sudo permissions to the admin user would also mean with php you can run

exec(‘sudo apt remove nginx’);

5

Yes, I understand. However, what if I avoid hosting any websites using the “admin” account ( Except for HestiaCP ) and instead use different accounts to manage websites? Too many accounts, im trying to optimise it.

How could i access a chrooted directories with sudo account ? i saw this in sshd config:

# Hestia SFTP Chroot
Match User sftp_dummy99,warfish
ChrootDirectory %h
    X11Forwarding no
    AllowTCPForwarding no
    ForceCommand internal-sftp

Are there any other security issues or errors that I should be aware of?
Thank you.