#!/bin/bash

RED='\033[0;31m'
GREEN='\033[0;32m'
NC='\033[0m' # No Color

clear

echo -e "${RED}→${NC} Starting System Update..."
sudo apt update >/dev/null 2>&1 && sudo apt upgrade -y >/dev/null 2>&1 && sudo apt dist-upgrade -y >/dev/null 2>&1 && sudo apt autoremove -y >/dev/null 2>&1 && sudo apt clean -y >/dev/null 2>&1
echo -e "${GREEN}✔${NC} System Update Completed..."

echo -e "${RED}→${NC} Installing required packages..."
sudo apt install --no-install-recommends xserver-xorg x11-xserver-utils xinit chromium-browser fonts-noto-color-emoji nfs-common watchdog xdotool rsync -y >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Required packages installed..."

echo -e "${RED}→${NC} Creating user 'loginuser'..."
sudo adduser --disabled-password --gecos "" loginuser >/dev/null 2>&1
echo -e "${GREEN}✔${NC} User 'loginuser' created..."

echo -e "${RED}→${NC} Setting permissions for 'loginuser'..."
sudo tee /etc/sudoers.d/loginuser >/dev/null << 'EOF'
loginuser ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart watchdog
loginuser ALL=(ALL) NOPASSWD: /usr/bin/echo
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cp
loginuser ALL=(ALL) NOPASSWD: /usr/bin/sed
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/reboot
loginuser ALL=(ALL) NOPASSWD: /usr/sbin/dhclient eth0
loginuser ALL=(ALL) NOPASSWD: /usr/bin/fbset
loginuser ALL=(ALL) NOPASSWD: /usr/bin/cat /var/lib/dhcp/*
EOF
sudo usermod -aG video loginuser >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Permissions for 'loginuser' set..."

echo -e "${RED}→${NC} Disabling root login..."
sudo tee /etc/ssh/sshd_config >/dev/null << 'EOF'
PermitRootLogin no
EOF
sudo passwd -l root >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Root login disabled..."

echo -e "${RED}→${NC} Copying required files..."
sudo rm ./rps-light-pxe/.gitignore ./rps-light-pxe/LICENSE ./rps-light-pxe/README.md >/dev/null 2>&1
sudo rsync -axHAXS --numeric-ids --info=progress2 ./rps-light-pxe/* / >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Required files copied..."

echo -e "${RED}→${NC} Setting file permissions..."
sudo chown loginuser:loginuser /home/loginuser/.xinitrc >/dev/null 2>&1
sudo chown loginuser:loginuser /home/loginuser/.bash_profile >/dev/null 2>&1
sudo chmod +x /root/remove_unused_kernel.sh >/dev/null 2>&1
sudo chmod +x /usr/bin/watchdog >/dev/null 2>&1
sudo chmod +x /usr/bin/chromium-monitor >/dev/null 2>&1
echo -e "${GREEN}✔${NC} File permissions set..."

echo -e "${RED}→${NC} Enabling services..."
sudo systemctl daemon-reload >/dev/null 2>&1
sudo systemctl enable watchdog >/dev/null 2>&1
sudo systemctl enable chromium-monitor >/dev/null 2>&1
sudo systemctl enable getty@tty1 >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Services enabled..."

echo -e "${RED}→${NC} Cleaning up old kernels..."
sudo bash /root/remove_unused_kernel.sh -u -e >/dev/null 2>&1
sudo rm /root/remove_unused_kernel.sh >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Old kernels cleaned up..."

echo -e "${RED}→${NC} Cleaning up installer..."
sudo rm -rf ./rps-light-pxe >/dev/null 2>&1
echo -e "${GREEN}✔${NC} Installer cleaned up..."

echo -e "${GREEN}✔${NC} Installation complete. Press any key to reboot."
read -n 1 -s
sudo reboot

# Version 1.0:
# Created 2024 by Tim Eertmoed, Christian Hampp @ WiS IT-Solutions GmbH, Germany to work on Raspian as custom pxe init script.