#!/usr/bin/bash

### <otsebyatina> for RPI
# quickstartsh="/usr/local/bin/quickstart.sh"
# cronline="@reboot $quickstartsh && crontab -l | grep -v $quickstartsh > /etc/crontab"
# cat quickstart.sh > $quickstartsh
# chown root:root $quickstartsh
# chmod u+x $quickstartsh
# echo $cronline >> /etc/crontab
### </otsebyatina>

print_ylw(){
  echo -e "\033[33m$1\033[0m"
}

function is_x64 {
  print_ylw "[ determine architecture ]"
  arch=$(lscpu | grep -i architecture | cut -d ":" -f2)
  if [ $arch != "x86_64" ]; then
    false
  else
    true
  fi
}

function choose_packages {
  if is_x64 ; then
    print_ylw "[ install with docker ]"
    packages="curl openssh-server iptables git nmap tcpdump net-tools wireguard tmux mc docker docker-compose"
  else
    print_ylw "[ install without docker ]"
    packages="curl openssh-server iptables git nmap tcpdump net-tools wireguard tmux"
  fi
}

function disable_ipv6 {
print_ylw "[ ipv6 turn off ]"
cat << EOF >> /etc/sysctl.conf
net.ipv6.conf.all.disable_ipv6=1
net.ipv6.conf.default.disable_ipv6=1
net.ipv4.ip_forward=1
EOF
sysctl -p
}

function sshd_cfg_bup {
print_ylw "[ sshd_config backup ]"
cat /etc/ssh/sshd_config > /etc/ssh/sshd_config_BUP
}

function sshd_config {
print_ylw "[ configuring sshd ]"

cat << EOF > /etc/ssh/sshd_config
Include /etc/ssh/sshd_config.d/*.conf
Port 22
ListenAddress 0.0.0.0
PermitRootLogin yes
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
KbdInteractiveAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem	sftp	/usr/lib/openssh/sftp-server
EOF
}

function add_authorized_keys {
  print_ylw "[ appending ssh-keys ]"
  echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAPCabE6gKZkksoYdCCclvqBwPLMHM7Wasi3OtzgYmfyJzCPy2twMBZ35HbmuXd0oUE6IBScosGwgs3+5EQ/21b5BUosdZy82DDGG8vXwY2oxqd0U3GzebLmks8TRvdnZ2KXyMlbM9tB5lxrT8kaCdNWtj3Zbipjj2U6LDfvl9J5qojW4F7sNuh3qQ5T7FJA0R/X3F2K3VVk+ZD0PXy1pIauXck3K7iHtTjjHmBw73Ym0d+cg8MEOY7Y+tU4s8f2dOHN9VOSFONoYw0tOxUzZwYGNplEj3xDFUTsbm5wpWd6rGF9ilAqAnwB5Uwbq39ThikKi72PwIFr1e4QIf1AIOdci+yfrezZ/CwHw3AgaCY1PMbX50EZfa3Y9YhZH4bT7mVMCOVkOtIURiHEdcGeqjCe73eizTvDPE+0/xLPqIkJLI9Q4EeJESzRDNUkGiL6/L7Yi38pY+TqRz2dpyvuN9CHAmNPc9kmU9sdOOfAvSv7wGzTG3zB5NCU7UlWW3wPRYLTvYbRXHDROF8OlFjhLYGG6AYdJbNXTfQFHymKOJRjWiVaeBKMlAmhosdlEyRN1zYBb0bHdptEWpsqjv6mPQ3W20pS1h4zRT2P71TsA7UPlHTAeLgUuv9NW49VpdoKBId8cfJOmLesft1bGHfjgg8UNTbCpnOi0lRjoT4vxBPQ==" >> ~/.ssh/authorized_keys
  echo "ssh-rsa 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 u0_a294_trr" >> ~/.ssh/authorized_keys
  echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUZ7HDTmN0WIQuw9oLjLQ7/wAgqq4wNHyfl+jjjlAhlPdZpi6k+/cJE0znUWNEx9TDTGIYzXsG9uy5txP0T7fhJWr0MisLI+pfmEJ18PpyjqJnMtOP1HDrbm1vQ4Kd20vcf77z4yhg4g2WO269iBBm1ZeW5HdQ1gkcFBF5tDKjSkV0Lfrtxg9G5d4ZE1xo8lfxXRRxfWr1uJcG1VAFRzpfOjkzsuCf4grNB4VKCt5+2tfbt91FB+50NxwULK1qWDHFGNWxcE6M2be7D41FnUqRCMCu1ksIKR6XZ+gADCADf94lyAfGbGPMS/qEysJnnIkG3h+oP10Ha8Ry4zaW/Ecf max@Maxims-MacBook-Air.local" >> ~/.ssh/authorized_keys
  echo "ssh-rsa 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 max@AirM" >> ~/.ssh/authorized_keys
  echo "ssh-rsa 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 T2" >> ~/.ssh/authorized_keys
}

function restart_sshd {
  print_ylw "[ restart sshd ]"
  systemctl restart sshd
}

function install_packages {
  print_ylw "[ packages installation: $packages ]"
  apt install $packages -y
}


disable_ipv6
sshd_cfg_bup
sshd_config
add_authorized_keys
restart_sshd
choose_packages
install_packages

print_ylw "[ DONE ]"