#!/bin/bash
# configurers new cserver
# version 07-11-2023

# stop on error
set -e

# sources.list
now=$(date +"%d-%m-%y")
cd /tmp
wget https://vandervlis.nl/files/sources.list12
mv /etc/apt/sources.list /etc/apt/sources.list-$now
mv sources.list12 /etc/apt/sources.list

# remove contrib and nonfree:
# sed -i -e 's/main contrib non-free/main/g' /etc/apt/sources.list

apt-get -qq update

# unattended upgrades
apt-get -qqy install unattended-upgrades
if test -e /etc/apt/apt.conf.d/10periodic; then rm /etc/apt/apt.conf.d/10periodic; fi
wget https://vandervlis.nl/files/20auto-upgrades -O /etc/apt/apt.conf.d/20auto-upgrades
wget https://vandervlis.nl/files/50unattended-upgrades -O /etc/apt/apt.conf.d/50unattended-upgrades

# some extra software
apt-get -qqy install sudo rpl iptables

# my firewall:
wget https://vandervlis.nl/files/firewall-laptop -O /usr/local/sbin/firewall
chmod +x /usr/local/sbin/firewall
wget https://www.vandervlis.nl/files/firewall-init -O /etc/init.d/firewall
chmod +x /etc/init.d/firewall
wget https://vandervlis.nl/files/firewall.service -O /lib/systemd/system/firewall.service
if ! test -e /lib/systemd/system/firewall.service; then
  ln -s /lib/systemd/system/firewall.service /etc/systemd/system/
fi
systemctl daemon-reload
systemctl enable firewall
systemctl start firewall

# install SSH server
apt-get -qqy install ssh

# grub
# apt -qqy install plymouth plymouth-themes
# sed -i -e 's/GRUB_TIMEOUT=5/GRUB_TIMEOUT=1/g' /etc/default/grub
# update-grub

# Intel microcode bij een Intel processor:
if test "`cat /proc/cpuinfo | grep -i GenuineIntel`" != ""; then 
  apt-get -qqy install intel-microcode
fi
if test "`lsmod | grep i915`" != ""; then
  apt-get -qqy install firmware-misc-nonfree
fi

# ssh aut-pubkey installeren
if ! test -e /root/.ssh; then mkdir /root/.ssh; fi
if ! test -e /root/.ssh/authorized_keys; then touch /root/.ssh/authorized_keys; fi
if ! grep -q 'auto@laptopp' /root/.ssh/authorized_keys; then
  cd /root/.ssh
  wget https://vandervlis.nl/auto-pubkey -O /root/.ssh/auto-pubkey
  cat /root/.ssh/auto-pubkey >> /root/.ssh/authorized_keys
  chmod 600 /root/.ssh/authorized_keys
  cd
fi

echo "klaar"