#!/bin/bash
# configurers new client
# version 24-01-2023

# stop on error
set -e

# sources.list
now=$(date +"%d-%m-%y")
cd /tmp
wget https://vandervlis.nl/files/sources.list11
mv /etc/apt/sources.list /etc/apt/sources.list-$now
mv sources.list11 /etc/apt/sources.list

# remove contrib and nonfree:
# sed -i -e 's/main contrib non-free/main/g' /etc/apt/sources.list

apt-get -qq update

# unattended upgrades
apt-get -qqy install unattended-upgrades
if test -e /etc/apt/apt.conf.d/10periodic; then rm /etc/apt/apt.conf.d/10periodic; fi
wget https://vandervlis.nl/files/20auto-upgrades -O /etc/apt/apt.conf.d/20auto-upgrades
wget https://vandervlis.nl/files/50unattended-upgrades -O /etc/apt/apt.conf.d/50unattended-upgrades

# some extra software
apt-get -qqy install chromium chromium-l10n
apt-get -qqy install thunderbird thunderbird-l10n-nl
apt-get -qqy install atril 
apt-get -qqy remove evince
apt-get -qqy install sudo
apt-get -qqy install xfce4-terminal
apt-get -qqy install rpl seahorse
apt-get -qqy install tigervnc-scraping-server
apt-get -qqy install dbus-x11

# my firewall:
wget https://vandervlis.nl/files/firewall-laptop -O /usr/local/sbin/firewall
chmod +x /usr/local/sbin/firewall
wget https://www.vandervlis.nl/files/firewall-init -O /etc/init.d/firewall
chmod +x /etc/init.d/firewall
wget https://vandervlis.nl/files/firewall.service -O /lib/systemd/system/firewall.service
if ! test -e /lib/systemd/system/firewall.service; then
  ln -s /lib/systemd/system/firewall.service /etc/systemd/system/
fi
systemctl daemon-reload
systemctl enable firewall
systemctl start firewall
sleep 3

# /etc/skel  (voor xfce)
# mv /etc/skel /etc/skel-backup
# mkdir /etc/skel
# cd /etc/skel
# wget -qr -nd --no-parent https://vandervlis.nl/files/skel
# rm index.html*

# welkompaul scripts
wget https://vandervlis.nl/files/welkompaul -O /usr/local/bin/welkompaul
chmod +x /usr/local/bin/welkompaul
wget https://vandervlis.nl/files/welkompaul.desktop -O /usr/share/applications/welkompaul.desktop
wget https://vandervlis.nl/files/welkompaul-vnc -O /usr/local/bin/welkompaul-vnc
chmod +x /usr/local/bin/welkompaul-vnc
wget https://vandervlis.nl/files/welkompaul-vnc.desktop -O /usr/share/applications/welkompaul-vnc.desktop

# install SSH server
apt-get -qqy install ssh

# Lightdm moet users onthouden
if test -e /etc/lightdm/lightdm.conf; then
  sed -i -e 's/#greeter-hide-users=false/greeter-hide-users=false/g' /etc/lightdm/lightdm.conf
fi

# Lightdm automatisch inloggen
# sed -i -e 's/#autologin-user=/autologin-user=default/g' /etc/lightdm/lightdm.conf

# ntp
#apt-get -qqy install chrony

# grub
# apt -qqy install plymouth plymouth-themes
mv /etc/default/grub /etc/default/grub.org
wget https://vandervlis.nl/files/grub -O /etc/default/grub
update-grub

# closed Intel firmware als er iwlwifi drivers worden gebruikt:
if test "`lsmod | grep iwlwifi`" != ""; then
  apt-get -qqy install firmware-iwlwifi
fi
# Intel microcode bij een Intel processor:
if test "`cat /proc/cpuinfo | grep -i GenuineIntel`" != ""; then 
  apt-get -qqy install intel-microcode
fi
if test "`lsmod | grep i915`" != ""; then
  apt-get -qqy install firmware-misc-nonfree
fi

# flash incl updates, nog niet getest
# wget https://vandervlis.nl/files/flash-update
# mv flash-update /etc/cron.d/
# chmod 644 /etc/cron.d/flash-update
# wget https://vandervlis.nl/files/fireflashupdate
# mv fireflashupdate /usr/local/sbin/
# chmod +x /usr/local/sbin/fireflashupdate

# ssh aut-pubkey installeren
if ! test -e /root/.ssh; then mkdir /root/.ssh; fi
if ! test -e /root/.ssh/authorized_keys; then touch /root/.ssh/authorized_keys; fi
if ! grep -q 'auto@laptopp' /root/.ssh/authorized_keys; then
  cd /root/.ssh
  wget https://vandervlis.nl/auto-pubkey -O /root/.ssh/auto-pubkey
  cat /root/.ssh/auto-pubkey >> /root/.ssh/authorized_keys
  chmod 600 /root/.ssh/authorized_keys
  cd
fi

lijst=`ls -1 /home`
for user in $lijst; do
  su $user - -c whoami
  su $user - -c "dbus-launch dconf write /org/cinnamon/desktop/screensaver/lock-enabled false"
  su $user - -c "dbus-launch dconf write /org/gnome/libgnomekbd/keyboard/layouts \"['us\taltgr-intl', 'us\tintl']\""
  su $user - -c "xdg-mime default atril.desktop application/pdf"
done

# mkdir /etc/vandervlis 2> /dev/null
# echo "see date of the file" > /etc/vandervlis/last-clientscript

echo
echo "klaar"