#!/bin/bash

Raspberry=false
DeviceID=$(cat /etc/os-release | grep "^ID=" | cut -d "=" -f2)
if [ "$DeviceID" == "raspbian" ]; then Raspberry=true; fi

echo "Updating System..."
apt update && apt upgrade -y
apt purge apparmor -y
apt autoremove -y

echo "Installint NTP and SNMP Services..."
apt install chrony snmpd wget -y
rm /etc/chrony/chrony.conf
rm /etc/snmp/snmpd.conf

###########################################################################
echo "Configuration Services..."
wget http://git.klenzel.net/daniel/chrony.conf/raw/master/chrony.conf
mv chrony.conf /etc/chrony/chrony.conf

cat <<EOF > /etc/snmp/snmpd.conf
createUser   KlenzelSNMP SHA "klen-ke93jg-zel"  DES
rouser       KlenzelSNMP
agentAddress udp:161,udp6:161
EOF

if [ $Raspberry ]; then
	echo "extend .1.3.6.1.4.1.2021.8.4 cpu_temp /scripts/snmp/snmp_temp/snmp_temp.sh cpu" >> /etc/snmp/snmpd.conf
	echo "extend .1.3.6.1.4.1.2021.8.5 gpu_temp /scripts/snmp/snmp_temp/snmp_temp.sh gpu" >> /etc/snmp/snmpd.conf
    
    mkdir  -p /scripts/snmp/
    cd /scripts/snmp/
    git clone http://git.klenzel.net/daniel/snmp_temp
    chmod +x snmp_temp/snmp_temp.sh
    
    usermod -aG video Debian-snmp
fi

###########################################################################

cat <<EOF >> /etc/rsyslog.conf
## Remote Logging
\$ModLoad imuxsock
\$ModLoad imklog
# Provides UDP forwarding. The IP is the server's IP address
*.* @172.30.1.252:514
EOF

echo "Configuration SSH-Daemon..."
sed -i 's@#Port 22@Port 4711@g' /etc/ssh/sshd_config
sed -i 's@#PermitRootLogin prohibit-password@PermitRootLogin yes@g' /etc/ssh/sshd_config

echo "Enabling and restarting nessasary Services..."
/bin/systemctl enable chrony
/bin/systemctl restart chrony
/bin/systemctl enable snmpd
/bin/systemctl restart snmpd
/bin/systemctl restart rsyslog.service
/bin/systemctl restart sshd

echo "Writing SSH-Keys..."
mkdir /root/.ssh
touch /root/.ssh/authorized_keys
sed -i '/backuppc$/d' /root/.ssh/authorized_keys
echo "ssh-rsa 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 backuppc@nhi-sp-sl-bkps" >> /root/.ssh/authorized_keys
echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClwNvLcpeFCnKyoEfPyCqJpmdw5c4OKEj/9uApbNBQa3gBWc91suIrMBO8hNSCD65J8fblWUhc1itA+VkBQxbZU6HDXu4xfWBROsJRGYn9Y/i7TbYz57j3LDVS2Ks3kT5cCJdLk/L9Fk05Q+tYpIH7mhxRcdjgr/tmppzaVaTFltCNcgaWhHH7oR2VBiGy6FCNS1Mhk8O4ic5o3PtQix43CZPk7kSIKX1YHHz4HQ4UNjr/T0/MSUBDItl4rKozLe6trSmobHCepXmVpg8mibVEAk3FG6So73xoXeohkdhLGyA9Zakzm+VmBycMSuWphDmspMFGIKprnL1lxnPUHLj5 root@nhi-00-sl-ihms" >> /root/.ssh/authorized_keys

dmesg | grep -i "Hyper-V" > /dev/null
if [ $? -eq 0 ] ; then
  apt install linux-virtual -y
  apt install linux-tools-virtual linux-cloud-tools-virtual -y
  
cat <<EOF >> /etc/initramfs-tools/modules
hv_vmbus
hv_storvsc
hv_blkvsc
hv_netvsc
EOF
  
  update-initramfs -u
fi

dmesg | grep -i "vmware" > /dev/null
if [ $? -eq 0 ] ; then
  apt install open-vm-tools -y
fi


echo ""; echo ""
echo -n "Bitte Hostname angeben: "; read hostname
echo $hostname > /etc/hostname


echo "Done, exiting..."