#!/bin/bash
set -e

RED='\033[0;31m'
NC='\033[0m'

#echo "timezone"
#region=Europe
#city=Moscow
#ln -sf /usr/share/zoneinfo/$region/$city /etc/localtime
#echo "done"

#echo "set locale"
#locale=de_DE.UTF-8
#lc=C.UTF-8
#locale-gen $locale
#update-locale LC_ALL=$lc
#update-locale LANGUAGE=$locale
#echo "done"

#echo "configurate sshd"
#default=22
#new=2498
#sed -i 's/#Port $default/Port $new/' /etc/ssh/sshd_config
#sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin no/' /etc/ssh/sshd_config
#systemctl restart sshd.service
#echo "done"

echo "create serviceuser"
user=serviceuser
if grep "$user" /etc/passwd ; then
    echo -e "${RED}user exists${NC}"
else
    useradd -p $(openssl passwd -1 password) -s /bin/bash "$user"
fi

echo "grant limited sudo rights $user"
if groups "$user" | grep sudo ; then
    echo -e "${RED}sudo rights exists${NC}"
else
    usermod -aG sudo "$user"
    echo 'serviceuser ALL=(ALL) NOPASSWD:/bin/systemctl' >> /etc/sudoers
    echo "done"
fi

#echo "install nginx and monit"
#apt update
#apt install nginx -y
#systemctl enable nginx.service
#apt install monit -y
#systemctl enable monit.service
#echo "done"