#!/bin/bash
# configureerd nieuwe client
# 20-03-2021

# sources.list
cd /tmp
mv /etc/apt/sources.list /etc/apt/sources.list-org
wget https://vandervlis.nl/files/sources.list10
mv sources.list10 /etc/apt/sources.list

# contrib nonfree verwijderen:
# sed -i -e 's/main contrib non-free/main/g' /etc/apt/sources.list

apt-get -qq update

# unattended upgrades
apt-get -qqy install unattended-upgrades
if ! test $? = 0; then echo "niet gelukt"; exit; fi
cd /tmp
wget https://vandervlis.nl/files/10periodic
wget https://vandervlis.nl/files/50unattended-upgrades
mv 10periodic /etc/apt/apt.conf.d/
mv 50unattended-upgrades /etc/apt/apt.conf.d/
unattended-upgrade --debug --dry-run

# nog wat software
apt-get -qqy install chromium chromium-l10n
apt-get -qqy install thunderbird thunderbird-l10n-nl
apt-get -qqy install lightning-extension lightning-l10n-nl
apt-get -qqy install atril gnome-software
apt-get -qqy remove evince
# apt-get -qqy install network-manager-openvpn-gnome
apt-get -qqy install sudo
apt-get -qqy install xfce4-terminal
apt-get -qqy install rpl seahorse
apt-get -qqy install webext-ublock-origin-firefox

# my firewall:
cd /usr/local/sbin
wget https://vandervlis.nl/files/firewall-laptop
mv /usr/local/sbin/firewall-laptop /usr/local/sbin/firewall
chmod +x /usr/local/sbin/firewall
wget https://www.vandervlis.nl/files/firewall-init
mv firewall-init /etc/init.d/firewall
chmod +x /etc/init.d/firewall
cd /lib/systemd/system/
wget https://vandervlis.nl/files/firewall.service
ln -s /lib/systemd/system/firewall.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable firewall
systemctl start firewall

# /etc/skel  (voor xfce)
# mv /etc/skel /etc/skel-backup
# mkdir /etc/skel
# cd /etc/skel
# wget -qr -nd --no-parent https://vandervlis.nl/files/skel
# rm index.html*

# welkompaul script
cd /usr/local/bin
wget https://vandervlis.nl/files/welkompaul
chmod +x welkompaul
cd /usr/share/applications
wget https://vandervlis.nl/files/welkompaul.desktop
chmod +x welkompaul.desktop

# install SSH server
apt-get -qqy install ssh

# Lightdm moet users onthouden
sed -i -e 's/#greeter-hide-users=false/greeter-hide-users=false/g' /etc/lightdm/lightdm.conf
# Lightdm automatisch inloggen
# sed -i -e 's/#autologin-user=/autologin-user=default/g' /etc/lightdm/lightdm.conf

# ntp
apt-get -qqy install ntp

# closed Intel firmware als er iwlwifi drivers worden gebruikt:
if test "`lsmod | grep iwlwifi`" != ""; then
  apt-get -qqy install firmware-iwlwifi
fi
# Intel microcode bij een Intel processor:
if test "`cat /proc/cpuinfo | grep -i GenuineIntel`" != ""; then 
  apt-get -qqy install intel-microcode
fi

# flash incl updates
# wget https://vandervlis.nl/files/flash-update
# mv flash-update /etc/cron.d/
# chmod 644 /etc/cron.d/flash-update
# wget https://vandervlis.nl/files/fireflashupdate
# mv fireflashupdate /usr/local/sbin/
# chmod +x /usr/local/sbin/fireflashupdate

# ssh auto-pubkey installeren
mkdir /root/.ssh
cd /root/.ssh
wget https://vandervlis.nl/auto-pubkey
cat auto-pubkey >> authorized_keys
chmod 600 authorized_keys

lijst=`ls -1 /home`
for user in $lijst; do
  su $user -c whoami
  su $user -c "dconf write /org/cinnamon/desktop/screensaver/lock-enabled false"
  su $user -c "dconf write /org/gnome/libgnomekbd/keyboard/layouts \"['us\taltgr-intl', 'us\tintl']\""
  su $user -c "xdg-mime default atril.desktop application/pdf"
done