#!/usr/bin/bash
#######################################################################
#Script Name: dsktp_setup_deb.sh
#Version: 1.6
#Description: Wrapper for installing DA server
#Last Modify Date: 03102021
#Author:Brent Dacus
#Email:brent[at]thedacus[dot]net
#######################################################################
#                   		Banner                                    #
#######################################################################
export COLUMNS=100
debsetup_banner() {
	cat <<"eot"
                       ad88888ba  es 
                     d8"      "8b ds   //
DdadPPYba,           Y8,          88  // 
HH      8b ,adPPYba, `Y8aaaaa,    88\\'   88       88 8b,dPPYba,
a8      44 a8P_____88   `"""""8b, 88 \\   88       88 88P'    "8a
8b      55 8PP"""""""         `8b 88  kk  88       88 88       d8
D8      aa "8b,   ,aa Y8a     a8P 88   s\ "8a,   ,a88 88b,   ,a8"
TTTYbbd8"'  `"Ybbd8"' "Y88888P"   Y8    e\ `"YbbdP'Y8 88`YbbdP"'
                                                      88
                                                      88
			Author: Brent Dacus
eot
}
#######################################################################
#                       Variables                                     #
#######################################################################
cur_hostname="$(hostname)"
serverip="$(hostname -I | awk '{print $1}')"
serverip6="$(hostname -I | awk '{print $2}')"
servername="$(hostname -s)"
svrdomainname="$(hostname -d)"
hstdomainname=thedacus.net
cpu_cores="$(grep </proc/cpuinfo -c 'model name')"
mem_total="$(awk '/MemTotal/ { print ($2/1024/1024)}' OFMT="%0.0f" /proc/meminfo)"
builddir=~/archsetupbuild/
LOG_FILE=~/install.log
exec > >(tee -a ${LOG_FILE}) 2>&1
#######################################################################
#                      User Variables                                 #
#######################################################################
rootemail="tech@thedacus.lan"
bshrc=~/.bashrc
bshrcpersn=~/.bashrc-personal
limitsconf="/etc/security/limits.conf"
sysctlconf="/etc/sysctl.conf"
#######################################################################
#                       Main Util Functions                           #
#######################################################################
mkdir -p ~/archsetupbuild/
trap '' 2 # ignore ctrl+c
##set PS3 prompt##
PS3="Number selection? "

linebreak() {
	printf '%*s\n' "${COLUMNS:-$(tput cols)}" '' | tr ' ' -
}
do_install() {
	printf "Installing %s into %s.\n" "${1}" "${dir}"
	cd "${dir}" || exit
	if [ -f "${1}" ]; then
		doas rm -f "${1}.bak"
		doas cp -f "${1}" "${1}.bak"
		doas chmod 600 "${1}.bak"
	fi
	doas wget --no-check-certificate -q -O "${1}" "${2}"
	doas chmod 755 "${1}"
}
do_setting() {
	printf "Installing value %s into %s.\n" "${1}" "${2}"
	printf 'Adding values in to %s.\n Please wait.\n' "${2}"
	if ! grep -q '#added by DH.' "${2}"; then
		echo '#added by DH.' | doas tee -a "${2}"
	fi
	if grep -q "${1}" "${2}"; then
		printf '%s exists.\n Skipping.\n' "${1}"
	else
		printf '%s does not exist\n' "$1"
		echo "${1}" | doas tee -a "${2}"
	fi
}
doreboot() {
	printf "Need to reboot? (y/n)? "
	read -r yn
	yn=${yn:-n}
	case $yn in
	[Yy]*)
		doas reboot
		;;
	[Nn]*) ;;
	esac
}
cycleswap() {
	printf "Cycling Swapfile.\n"
	swapoff -a
	sleep 10
	swapon -a
}
#######################################################################
#                       Add Admin User                                #
#######################################################################
addadminuser() {
	printf "Installing doas package.\n"
	printf "Please Wait.\n"
	sudo apt-get install doas

	printf 'Setting up DOAS file.\n'
    if ! grep -q "#BD doas file setup" /etc/doas.conf; then
	sudo tee /etc/doas.conf &>/dev/null <<eol
#BD doas file setup
permit nopass :wheel as root
permit nopass bdacus01 as root
eol
source .bashrc
	printf 'Done.\n'
fi
    printf 'Setting admin groups.\n'
	doas sed -i -e 's/.*auth       required   pam_wheel.so/auth required pam_wheel.so/g' /etc/pam.d/su
    doas addgroup --system wheel
    doas usermod -aG wheel bdacus01	

	if ! grep -q "#Personal Bashrc" ~/.bashrc-personal; then
		printf 'Bash shell profile not set up. adding...\n'
		tee -a ~/.bashrc-personal &>/dev/null <<eol
#Personal Bashrc
alias sudo='doas'
alias hh='history |grep '
alias search='fzf -e -q '
alias dodesk='curl -o dsktp_setup_deb.sh -L https://files.delaintech.com/dsktp_setup_deb.sh && bash dsktp_setup_deb.sh'
alias cycle='doas systemctl restart '
alias status='doas systemctl is-active '
alias bat=batcat
alias ld='eza -lD'
alias lf='eza -lf --color=always | grep -v /'
alias lh='eza -dl .* --group-directories-first'
alias ll='eza -al --group-directories-first'
alias ls='eza -alf --color=always --sort=size | grep -v /'
alias lt='eza -al --sort=modified'
alias fd=fdfind
export FZF_DEFAULT_OPTS="--preview 'batcat --color=always {}'"
export FZF_DEFAULT_COMMAND="fdfind --type f"
eol
		printf "Print Profile File.\n"
		cat ~/.bashrc-personal
		printf "Done.\n"
	else
		printf "Profile already setup.  See Below.\n"
		cat ~/.bashrc-personal
	fi

    printf "removing unneed packages.\n"
	printf "Please Wait.\n"
    doas apt-get remove firefox libreoffice-*

}
#######################################################################
#                        Set Timezone                                 #
#######################################################################
settimezone() {
	printf "What TimeZone are you in? [America/Chicago]: "
	read -r tmzone
	tmzone=${tmzone:-America/Chicago}
	if timedatectl | grep -q "America/Chicago"; then
		printf "%s found\n" "$tmzone"
	else
		timedatectl set-timezone "$tmzone"
		timedatectl set-local-rtc 0
		printf "We set timezone as:\n"
		timedatectl
		printf "Done.\n"
	fi
}
#######################################################################
#                       Set Server Hostname                           #
#######################################################################
creathostname() {
	# does the Host already exist?
	unset new_hostname
	printf "Please enter a Hostname to add: "
	read -r new_hostname
	if ! grep -q "$new_hostname" /etc/hosts; then
		printf 'Hostname not found. adding...\n'
		printf "Changing hostname %s from to %s...\n" "$cur_hostname" "$new_hostname"
		doas hostnamectl set-hostname "$new_hostname"
		serverip="$(hostname -I | awk '{print $1}')"
		servername="$(hostname -s)"
		printf "${serverip}           ${new_hostname} ${servername}" | doas tee -a /etc/hosts
		printf "\nPrint Host File.\n"
		doas cat /etc/hosts
		printf "\nDone.\n"
	else
		printf "Hostname exsits.\nAll good.\n"
	fi
}
#######################################################################
#                       Remove Hostnames                              #
#######################################################################
removehosts() {
	printf "Here is the Host file.\n"
	cat /etc/hosts
	printf "\nWhat is the server name or ip to remove? "
	read -r removehosts
	doas sed -i.bkp '/'$removehosts'/d
' /etc/hosts
	printf "Print Host.\n"
	doas cat /etc/hosts
	printf "\nDone.\n"
	while true; do
		printf "Continue removing? (y/n)?"
		read -r yn
		yn=${yn:-n}
		case $yn in
		[Yy]*)
			removehosts
			break
			;;
		[Nn]*) break ;;
		esac
	done
}
#######################################################################
#                       Add External Hosts                            #
#######################################################################
addhosts() {
	# does the Host already exist?
	unset serverip add_hostname servername
	printf "Enter Hostname to add:[ IP FDQN Hostname ]: "
	read -r serverip add_hostname servername
	if ! grep -q "$add_hostname" /etc/hosts; then
		printf 'Hostname not found. adding...\n'
		echo "${serverip}			${add_hostname} ${servername}" | tee -a /etc/hosts
		printf "Print Host File.\n"
		cat /etc/hosts
		printf "Done.\n"
	else
		printf "Hostname exsits.\nAll good.\n"
	fi
	while true; do
		printf "Continue adding? (y/n)?"
		read -r yn
		yn=${yn:-n}
		case $yn in
		[Yy]*)
			creathostentry
			break
			;;
		[Nn]*) break ;;
		esac
	done
}
#######################################################################
#                       Update OS on Server                           #
#######################################################################
serverupdate() {
	printf "Arch Cleaning and Updating.\n"
	printf "Debian Cleaning and Updating.\n"
	doas apt-get ${aptargs} autoremove
	doas apt-get autoclean
	doas apt-get ${aptargs} update
	doas apt-get ${aptargs} upgrade
	doas apt-get ${aptargs} dist-upgrade
	printf "Done.\n"
}
#######################################################################
#                       Install Standard Packages                     #
#######################################################################
installpreq() {
	printf "Run Common Software Install? (y/n)?"
	read -r yn
	yn=${yn:-n}
	case $yn in
	[Yy]*)
	printf "Please Wait.\n"
	doas apt-get install anydesk bat btop brave-browser backintime calibre darktable \
	emacs exa fish fzf fd-find htop kitty klavaro meld neovim remmina \
	remmina-plugin-vnc remmina-plugin-secret ripgrep stow synaptic tigervnc-viewer \
	tigervnc-tools variety codium yubikey-manager-qt
		;;
	[Nn]*) ;;
	esac
	printf "Run Flatpack Software Install? (y/n)?"
	read -r yn
	yn=${yn:-n}
	case $yn in
	[Yy]*)
	printf "Please Wait.\n"
	doas apt-get install flatpak plasma-discover-backend-flatpak
	flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
    flatpak install -y flathub com.bitwarden.desktop com.sleepfiles.OSCAR im.riot.Riot \
	io.gitlab.librewolf-community org.signal.Signal 
	flatpak install -y flathub-verified eu.betterbird.Betterbird
		;;
	[Nn]*) ;;
	esac

}
#######################################################################
#                       Harden Server                                 #
#######################################################################
hardenserver() {
	printf "Do we need to Secure sshd? (y/n)? "
	read -r yn
	yn=${yn:-n}
	case $yn in
	[Yy]*)
		cursshport="$(grep -m1 -E "Port .*" /etc/ssh/sshd_config)"
		printf "Enter SSH port to change to: "
		read -r sshport
		sshport=${sshport:-14}
		printf "Set to Port: %s\n" "$sshport"
		printf "Securing the server, please wait...\n"
		doas sed -i -e "s/$cursshport/Port ${sshport}/g" /etc/ssh/sshd_config
		doas sed -i -e 's/.*UseDNS .*/UseDNS no/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#AddressFamily any/AddressFamily inet/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#LoginGraceTime 2m/LoginGraceTime 2m/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#MaxAuthTries 6/MaxAuthTries 5/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#MaxStartups 10:30:100/MaxStartups 10:30:100/g' /etc/ssh/sshd_config
		doas sed -i -e 's/.*PermitRootLogin yes/PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
		doas sed -i -e 's/.*PasswordAuthentication .*/PasswordAuthentication no/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#ClientAliveInterval .*/ClientAliveInterval 120/g' /etc/ssh/sshd_config
		doas sed -i -e 's/#ClientAliveCountMax .*/ClientAliveCountMax 15/g' /etc/ssh/sshd_config
		doas sed -i -e 's/.*PubkeyAuthentication yes/PubkeyAuthentication yes/g' /etc/ssh/sshd_config
		doas sed -i -e 's/.*AuthorizedKeysFile .*/AuthorizedKeysFile .*/g' /etc/ssh/sshd_config
		
		doas systemctl restart sshd
		;;
	[Nn]*) ;;
	esac
}
#######################################################################
#                       Main Configure Section                        #
#######################################################################

########################################################################
#                       Configure Performance                         #
#######################################################################
perfmserver() {
	printf "Setting up Server General file Ulimits.\n"
	do_setting "* soft nofile 65535" "$limitsconf"
	do_setting "* hard nofile 65535" "$limitsconf"
	do_setting "root soft nofile 65535" "$limitsconf"
	do_setting "root hard nofile 65535" "$limitsconf"
	do_setting "bdacus01 soft nofile 65535" "$limitsconf"
	do_setting "bdacus01 hard nofile 65535" "$limitsconf"

	printf "Setting up Server Sysctl file.\n"
	do_setting "net.core.somaxconn = 65536" "$sysctlconf"
	do_setting "net.ipv4.conf.all.log_martians = 1" "$sysctlconf"
	do_setting "net.ipv4.tcp_fin_timeout = 15" "$sysctlconf"
	do_setting "net.ipv4.tcp_rfc1337 = 1" "$sysctlconf"
	do_setting "net.ipv4.tcp_synack_retries = 3" "$sysctlconf"
	do_setting "net.ipv4.tcp_syncookies = 0" "$sysctlconf"
	do_setting "net.ipv4.tcp_syn_retries = 3" "$sysctlconf"
	do_setting "vm.swappiness = 1" "$sysctlconf"
	do_setting "kernel.printk = 3	4	1	3" "$sysctlconf"
	printf "Complete Reboot.\n"
	doreboot
}
#######################################################################
#                       Main Menu of Script                           #
#######################################################################
clear
debsetup_banner
linebreak

printf "Hostname: %s Host IP: %s \n" "$cur_hostname" "$serverip"

linebreak
cat <<"eot"
			DEBIAN DESK SETUP MENU
eot
linebreak
while true; do
	options=("Add Admin User" "Timezone" "Hostname" "Remove hosts" "Add hosts" "Update server" "Install Common Packages" "Harden Server" "Performance Tweaks" "Quit")
	printf "Choose an option: \n"
	select opt in "${options[@]}"; do
		case $REPLY in
		1)
			addadminuser
			break
			;;
		2)
			settimezone
			break
			;;
		3)
			creathostname
			break
			;;
		4)
			removehosts
			break
			;;
		5)
			addhosts
			break
			;;
		6)
			serverupdate
			break
			;;
		7)
			installpreq
			break
			;;
		8)
			hardenserver
			break
			;;
		9)
			perfmserver
			break
			;;
		10) break 2 ;;
		*) echo "Invalid option. Try again." >&2 ;;
		esac
	done
done

if [ -d "$builddir" ]; then
	rm -rf $builddir
fi
mkdir $builddir
if [ "$run" ]; then
	${run}
	exit
fi

printf "Cleaning up build files, please wait...\n"
cd ~ || exit
rm -rf $builddir