#!/bin/bash
# configurers new client
# version 15-7-2026

# stop on error
set -e

# wat is de default user?
user=`grep 1000:1000 /etc/passwd | cut -d: -f1`

# sources.list
now=$(date +"%d-%m-%y-%H:%M")
mv /etc/apt/sources.list /etc/apt/sources.list-$now
wget https://vandervlis.nl/files/sources.list13 -O /etc/apt/sources.list

# remove contrib and nonfree:
# sed -i -e 's/main contrib non-free/main/g' /etc/apt/sources.list

apt-get -qq update

# unattended upgrades
apt-get -qqy install unattended-upgrades
if test -e /etc/apt/apt.conf.d/10periodic; then rm /etc/apt/apt.conf.d/10periodic; fi
wget https://vandervlis.nl/files/20auto-upgrades -O /etc/apt/apt.conf.d/20auto-upgrades
wget https://vandervlis.nl/files/52unattended-upgrades-local -O /etc/apt/apt.conf.d/52unattended-upgrades-local

# some extra software
apt-get -qqy install chromium chromium-l10n
apt-get -qqy install thunderbird thunderbird-l10n-nl
apt-get -qqy install libreoffice hyphen-nl hyphen-en-gb
apt-get -qqy install atril gdebi
apt-get -qqy remove evince
apt-get -qqy install sudo iptables
apt-get -qqy install rpl seahorse
apt-get -qqy install dbus-x11
apt-get -qqy install pmount  # om usb devices te mounten.
apt-get -qqy install webext-ublock-origin-firefox
apt-get -qqy install dconf-cli
apt-get -qqy install caja-admin slick-greeter
apt-get -qqy install vlc gnome-disk-utility gnome-snapshot

# my firewall:
wget https://vandervlis.nl/files/firewall-laptop -O /usr/local/sbin/firewall
chmod +x /usr/local/sbin/firewall
wget https://www.vandervlis.nl/files/firewall-init -O /etc/init.d/firewall
chmod +x /etc/init.d/firewall
wget https://vandervlis.nl/files/firewall.service -O /lib/systemd/system/firewall.service
if ! test -e /lib/systemd/system/firewall.service; then
  ln -s /lib/systemd/system/firewall.service /etc/systemd/system/
fi
systemctl daemon-reload
systemctl enable firewall
systemctl start firewall
sleep 3

# welkompaul scripts
apt-get -qqy install tigervnc-scraping-server
wget https://vandervlis.nl/files/welkompaul -O /usr/local/bin/welkompaul
chmod +x /usr/local/bin/welkompaul
wget https://vandervlis.nl/files/welkompaul.desktop -O /usr/share/applications/welkompaul.desktop
wget https://vandervlis.nl/files/welkompaul-vnc -O /usr/local/bin/welkompaul-vnc
chmod +x /usr/local/bin/welkompaul-vnc
wget https://vandervlis.nl/files/welkompaul-vnc.desktop -O /usr/share/applications/welkompaul-vnc.desktop

# install SSH server
apt-get -qqy install ssh

# Lightdm moet users onthouden
#if test -e /etc/lightdm/lightdm.conf; then
#  sed -i -e 's/#greeter-hide-users=false/greeter-hide-users=false/g' /etc/lightdm/lightdm.conf
#fi

if [ -d /etc/lightdm ] && [ ! -d /etc/lightdm/lightdm.conf.d ]; then
  mkdir -p /etc/lightdm/lightdm.conf.d
fi

if [ -d /etc/lightdm/lightdm.conf.d ]; then
  echo "[Seat:*]" >> /etc/lightdm/lightdm.conf.d/90-changes.conf
  echo "greeter-hide-users=false" >> /etc/lightdm/lightdm.conf.d/90-changes.conf
  #echo "autologin-user=$user" >> /etc/lightdm/lightdm.conf.d/90-changes.conf
fi

# grub
# apt -qqy install plymouth plymouth-themes
wget https://vandervlis.nl/files/grub-changes.cfg -O /etc/default/grub.d/grub-changes.cfg
update-grub

# ssh auto-pubkey installeren
if ! test -e /root/.ssh; then mkdir /root/.ssh; fi
if ! test -e /root/.ssh/authorized_keys; then touch /root/.ssh/authorized_keys; fi
if ! grep -q 'auto@laptopp' /root/.ssh/authorized_keys; then
  cd /root/.ssh
  wget https://vandervlis.nl/auto-pubkey -O /root/.ssh/auto-pubkey
  cat /root/.ssh/auto-pubkey >> /root/.ssh/authorized_keys
  chmod 600 /root/.ssh/authorized_keys
  cd
fi

# voor Mate
mkdir -p /etc/skel/.config/dconf/
wget https://vandervlis.nl/files/user -O /etc/skel/.config/dconf/user
wget https://vandervlis.nl/files/mate_settings -O /tmp/mate_settings
sudo -u $user DISPLAY=:0.0 bash -c "dconf load /org/mate/ < /tmp/mate_settings"

# sudo voor user 1000:
adduser $user sudo

echo
# echo "Wordt nu gewone gebruiker (met exit) en geef dit commando:"
# echo "dconf load /org/mate/ < /tmp/mate_settings"
echo "Het script werd netjes afgerond, herstart nu de computer"
echo
echo "Of wacht, denk wellicht aan het upgraden van de firmware met:"
echo "apt install fwupd"
echo "fwupdmgr get-updates"
echo "fwupdmgr upgrade"
echo "apt remove fwupd && apt autoremove"