#!/bin/bash

# ---------------------------------------------------------
# Darkhand's bootstrap script for prepping a fresh install.
# Version 01-24-24
# ---------------------------------------------------------

# Add/remove the base packages you wish to install here:

PACKAGES="\

sudo \
rsyslog \
isc-dhcp-client \
tmux \
htop \
curl \
git \
bmon \
iptables \
rsync \
pv\

"
# ----------
# Functions
# ----------

# Get username to create and setup
function getUsername() {
  createdUser=0
  NAME=$(whiptail --title "Create user" --cancel-button "Skip" --inputbox "Enter username to create:" 0 0 3>&1 1>&2 2>&3)
    exitstatus=$?
      if [ "$exitstatus" = 0 ]; then
        # Check if user already exists
        if id "$NAME" &>/dev/null; then
          #whiptail --title Error --ok-button Retry --msgbox "User already exists!" 0 0
          #getUsername
          if whiptail --yesno "User already exists. Continue setting up user $NAME?" 0 0 ;then
            configureUser
          else
            getUsername
          fi
        else
          # User not found, ok to create user and set a password
          getPassword
        fi
      fi
}

# Set password
function getPassword() {
  PASSWORD1=$(whiptail --title "Create password" --inputbox "Please enter a password for user $NAME:" 0 0 3>&1 1>&2 2>&3)
    exitstatus=$?
      [[ "$exitstatus" = 1 ]] && exit;

  PASSWORD2=$(whiptail --title "Create password" --inputbox "Please re-enter your password:" 0 0 3>&1 1>&2 2>&3)
    exitstatus=$?
      [[ "$exitstatus" = 1 ]] && exit;

    if [ $PASSWORD1 != $PASSWORD2 ] 
      then
        whiptail --ok-button Retry --msgbox "Passwords do mot match!" 0 0
        getPassword
      else
        # Username is created, so it's safe to run the configurations
        configureUser
    fi
}

# A helper function to uncomment a config file line or add it if it doesn't exist (used for .bashrc additions)
function addOrUncommentLine() {
  local pattern="$1"
  local newLine="$2"
  local file="$3"

  # Check if the line exists in any form (commented or uncommented)
  if grep -qE "$pattern" "$file"; then
    # Line exists, replace it with the new line
    sed -i "/$pattern/c\\$newLine" "$file"
  else
    # Line does not exist, add the new line
    echo "$newLine" >> "$file"
  fi
}

function configureUser() {
  # Create user (if they don't already exist) and set default shell
  if ! id "$NAME" >/dev/null 2>&1
    then
      # User does not exist, create them
      useradd -s /bin/bash -m $NAME
      echo $NAME:$PASSWORD1 | chpasswd
      createdUser=1
    else
    # User already exists, do nothing"
    true
  fi

  # Add user to sudoers
  usermod -a -G sudo $NAME
  
  #Require no password for sudo commands
  echo "$NAME ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/sudoer_$NAME

  # .bashrc additions
  BASHRC_FILE="/home/$NAME/.bashrc"
  addOrUncommentLine "alias ll=" "alias ll='ls -lh'" "$BASHRC_FILE"
  addOrUncommentLine "alias la=" "alias la='ls -alh'" "$BASHRC_FILE"
  addOrUncommentLine "force_color_prompt=" "force_color_prompt=yes" "$BASHRC_FILE"

  # Copy the modified .bashrc to /root/.bashrc, since we want these modifications when logged in as root as well
  cp "$BASHRC_FILE" /root/.bashrc
}

# -------------------------------------------------
# Start
# -------------------------------------------------

# Require root
if [[ $EUID -ne 0 ]]; then
    echo "$0 is not running as root. Try using sudo."
    exit 2
fi

# Ensure prerequisites are installed, and install them if not
# apt-utils
if [ $(dpkg-query -W -f='${Status}' apt-utils 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
  echo "Installing apt-utils before continuing..."
  apt-get install apt-utils -y > /dev/null;
fi

# whiptail
if [ $(dpkg-query -W -f='${Status}' whiptail 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
  echo "Installing whiptail before continuing..."
  apt-get install whiptail -y > /dev/null;
fi

# Update package list
{
  i=1
    while read -r line; do
      i=$(( i + 1 ))
      echo $i
      done < <(apt-get update)
} | whiptail --title "Progress" --gauge "Updating package list..." 6 60 0

# Upgrade packages
{
  i=1
    while read -r line; do
      i=$(( i + 1 ))
      echo $i
      done < <(apt-get upgrade -y)
} | whiptail --title "Progress" --gauge "Upgrading existing packages..." 6 60 0

# Request username setup
getUsername

# Set root shell to bash
chsh -s /bin/bash

# Optionally change timezone
CURRENT_TZ=$(cat /etc/timezone 2>/dev/null)
if [ -z "$CURRENT_TZ" ]; then
  CURRENT_TZ=$(readlink /etc/localtime 2>/dev/null | sed 's|.*/zoneinfo/||')
fi
if whiptail --yesno --defaultno "Timezone is currently ${CURRENT_TZ:-unknown}. Change?" 0 0 ;then
  dpkg-reconfigure tzdata
  whiptail --title "Complete" --msgbox "Timezone updated!" 0 0
fi

# Optionally install build-essential
if whiptail --yesno --defaultno "Install build-essential?" 0 0 ;then
  {
    i=1
    while read -r line; do
      i=$(( i + 1 ))
      echo $i
      done < <(apt-get install build-essential -y)
  } | whiptail --title "Progress" --gauge "Installing build-essential..." 6 60 0
  whiptail --title "Complete" --msgbox "build-essential packages installed!" 0 0
fi

# Optionally install SteamCmd
if whiptail --yesno --defaultno "Install SteamCmd?" 0 0 ;then
  echo "Installing SteamCmd..."

  # Add i386 architecture
  dpkg --add-architecture i386

  # Backup the sources.list file
  cp /etc/apt/sources.list /etc/apt/sources.list.backup

  # Add 'non-free' to each repository entry
  sed -i 's/\(deb\|deb-src\) \([^ ]* [^ ]*\)/\1 \2 non-free/g' /etc/apt/sources.list

  # Create a configuration file to suppress non-free firmware warnings
  echo 'APT::Get::Update::SourceListWarnings::NonFreeFirmware "false";' > /etc/apt/apt.conf.d/no-nonfree-warnings.conf

  # Update package list with progress bar
  {
    i=1
    while read -r line; do
      i=$(( i + 1 ))  # Increment progress
      echo $i
    done < <(apt-get update)
  } | whiptail --title "Progress" --gauge "Updating package list..." 6 60 0

  # Pre-accept Steamcmd license and EULA:
  echo steam steam/license note '' | debconf-set-selections
  echo steam steam/purge note '' | debconf-set-selections
  echo steam steam/question select "I AGREE" | debconf-set-selections

  # Install Steamcmd package
  {
    i=1
    while read -r line; do
      i=$(( i + 1 ))  # Increment progress
      echo $i
    done < <(apt-get install steamcmd -y)
  } | whiptail --title "Progress" --gauge "Installing SteamCmd..." 6 60 0
fi

# Install decompress script and set executable
wget -O /usr/local/bin/decompress https://raw.githubusercontent.com/Darkhand81/decompress/main/decompress.sh > /dev/null 2>&1

# Check if script download succeeded
if [ $? -eq 0 ]; then
    chmod +x /usr/local/bin/decompress
else
    whiptail --title "Error" --msgbox "Decompress script download failed! Continuing." 0 0
fi

# Install basic packages
{
  i=1
    while read -r line; do
      i=$(( i + 1 ))
      echo $i
      done < <(apt-get install $PACKAGES -y 2>&1 | grep -vi "extracting templates from packages") # The grep is a workaround to exclude an errant line that appears in the progress bar during installation
} | whiptail --title "Progress" --gauge "Installing basic packages..." 6 60 0

# Change GRUB timeout at boot to 1 second if not already set
if ! grep -q "GRUB_TIMEOUT=1" /etc/default/grub; then
    {
        i=1
        while read -r line; do
          i=$(( i + 10 ))  # Increment progress
          echo $i
        done < <(sed -i 's/GRUB_TIMEOUT=[0-9]*/GRUB_TIMEOUT=1/' /etc/default/grub 2>&1; update-grub 2>&1)
      } | whiptail --title "Progress" --gauge "Updating GRUB timeout" 6 60 0
fi

# Configure SSH to allow root login only from local network if not already set
if ! grep -q "Match Address 192.168.1.0/24" /etc/ssh/sshd_config; then
    {
        echo ""
        echo "# Allow root login only from local network"
        echo "Match Address 192.168.1.0/24"
        echo "    PermitRootLogin yes"
    } >> /etc/ssh/sshd_config

    # Restart SSH service to apply changes
    systemctl restart ssh
fi

# If we're running on WSL, allow ping without superuser priviliges
# (/proc/sys/fs/binfmt_misc/WSLInterop normally only exists when running on WSL)
if [[ -f /proc/sys/fs/binfmt_misc/WSLInterop ]]; then
    setcap cap_net_raw+ep /bin/ping
fi

#Print exit message depending on what we did, based on the value of $createdUser
if [ "$createdUser" -eq 1 ]; then
  whiptail --title "Done!" --msgbox "Setup complete!\n\n - Updated package list\n - Upgraded all packages\n - Set root shell to bash\n - User $NAME created\n - Added $NAME to sudoers file\n - Added ll/la aliases\n - Installed decompress script\n - Updated GRUB timeout\n - Allowed root login from local network\n - Installed packages: $PACKAGES" 0 0
else
  whiptail --title "Done!" --msgbox "Setup complete!\n\n - Updated package list\n - Upgraded all packages\n - Set root shell to bash\n - Installed decompress script\n - Updated GRUB timeout\n - Allowed root login from local network\n - Installed packages: $PACKAGES" 0 0
fi

echo "Setup complete, enjoy!"