#!/bin/bash

set -e

if [ "$(id -u)" = "0" ]; then
   echo "You probably don't want to run this as root!"
   echo "Do this first:"
   echo "adduser caspervk"
   echo "adduser caspervk sudo"
   exit 1
fi


# Packages
sudo apt update
sudo apt upgrade -y
sudo apt install -y \
  openssh-server \
  git \
  curl \
  wget \
  dnsutils \
  rsync \
  htop \
  tmux \
  ufw \
  vnstat \
  ntp \
  pwgen


# SSH
sudo sed -i 's/#Port 22/Port 222/' /etc/ssh/sshd_config
sudo systemctl restart sshd

ssh-keygen -t ed25519 || true
ln -sr authorized_keys ~/.ssh/authorized_keys
ln -sr ssh_config ~/.ssh/config


# Git
ln -sr .gitconfig ~/.gitconfig
read -p "Git email: " email  # avoid web scraping of email address
sed -i "s/<EMAIL>/$email/" .gitconfig


# Firewall
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 222/tcp comment "sshd"
sudo ufw enable
sudo ufw status