#!/bin/bash
# configureerd nieuwe client
# 11-12-2018

# sources.list
cd /tmp
mv /etc/apt/sources.list /etc/apt/sources.list-org
wget https://vandervlis.nl/files/sources.list9
mv sources.list9 /etc/apt/sources.list

# rpl
apt-get -y install rpl

# contrib nonfree
rpl main "main contrib non-free" /etc/apt/sources.list

apt-get update

# unattended upgrades
apt-get -y install unattended-upgrades
if ! test $? = 0; then echo "niet gelukt"; exit; fi
cd /tmp
wget https://vandervlis.nl/files/10periodic
wget https://vandervlis.nl/files/50unattended-upgrades
mv 10periodic /etc/apt/apt.conf.d/
mv 50unattended-upgrades /etc/apt/apt.conf.d/
unattended-upgrade --debug --dry-run

# nog wat software
apt-get -y install chromium chromium-l10n
apt-get -y install thunderbird thunderbird-l10n-nl
apt-get -y install lightning-extension lightning-l10n-nl
apt-get -y system-config-printer-common
# apt-get -y install xul-ext-sogo-connector
# apt-get -y -t stretch-backports install xserver-xorg-video-intel
# apt-get -y -t stretch-backports install libreoffice libreoffice-sbc-firebird libreoffice-sbc-hsqldb \
#   libreoffice-help-en-us libreoffice-help-nl libreoffice-report-builder-bin avmedia-backend-gstreamer
apt-get -y install atril

# my firewall:
cd /usr/local/sbin
wget https://vandervlis.nl/files/firewall-laptop
mv /usr/local/sbin/firewall-laptop /usr/local/sbin/firewall
chmod +x /usr/local/sbin/firewall
wget https://www.vandervlis.nl/files/firewall-init
mv firewall-init /etc/init.d/firewall
chmod +x /etc/init.d/firewall
cd /lib/systemd/system/
wget https://vandervlis.nl/files/firewall.service
ln -s /lib/systemd/system/firewall.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable firewall
systemctl start firewall

# install SSH server
apt-get -y install ssh

# Lightdm moet users onthouden
rpl "#greeter-hide-users=false" "greeter-hide-users=false" /etc/lightdm/lightdm.conf
# Lightdm automatisch inloggen
# rpl "#autologin-user=" "autologin-user=default" /etc/lightdm/lightdm.conf

# ntp
apt-get -y install ntp

# closed Intel:
# apt-get -y install firmware-iwlwifi
apt-get -y install intel-microcode

# flash incl updates, nog niet getest
# wget https://vandervlis.nl/files/flash-update
# mv flash-update /etc/cron.d/
# chmod 644 /etc/cron.d/flash-update
# wget https://vandervlis.nl/files/fireflashupdate
# mv fireflashupdate /usr/local/sbin/
# chmod +x /usr/local/sbin/fireflashupdate

# ufw firewall:
# apt-get -y install ufw gufw
# rpl "ENABLED=no" "ENABLED=yes" /etc/ufw/ufw.conf

# apt-get -y -t stretch-backports install linux-image-amd64 firmware-iwlwifi
# apt -y install firmware-realtek

# ssh key installeren
mkdir /root/.ssh
cd /root/.ssh
wget https://vandervlis.nl/auto-pubkey
cat auto-pubkey >> authorized_keys
chmod 600 authorized_keys

# instellingen in cinnamon, onzin, want moet als user!
# dconf write /org/cinnamon/desktop/screensaver/lock-enabled false
# dconf write /org/gnome/libgnomekbd/keyboard/layouts "['us\taltgr-intl','us']"
# gsettings set org.cinnamon.settings-daemon.plugins.a11y-settings active false

lijst=`ls -1 /home`
for user in $lijst; do
  su $user -c whoami
  su $user -c "gsettings set org.cinnamon.settings-daemon.plugins.a11y-settings active false"
  su $user -c "dconf write /org/cinnamon/desktop/screensaver/lock-enabled false"
  #su $user -c "dconf write /org/gnome/libgnomekbd/keyboard/layouts \"['us\taltgr-intl','us']\""
  su $user -c "dconf write /org/gnome/libgnomekbd/keyboard/layouts \"['us\taltgr-intl', 'us\tintl']\""
#  su $user -c "xdg-mime default atril.desktop application/pdf"
done