#!/bin/bash -ev

mkdir -p ~/.ssh/socks
SSH_OPTS='-oControlMaster=auto -oControlPath=~/.ssh/socks/master-%r@%h:%p'
SSH="ssh $SSH_OPTS"
SCP="scp $SSH_OPTS"
$SSH -T -f -oServerAliveInterval=15 -oServerAliveCountMax=3 sam@nipl.net sleep 1000000

passwd
adduser sam
adduser sam staff
adduser sam bind

touch ~/.vimrc

sed -i 's/ main/ main contrib non-free/' /etc/apt/sources.list
sed -i 's/^deb-src .* lenny /#&/' /etc/apt/sources.list
cat <<End >>/etc/apt/sources.list

#-----------------------------------------------------------------------------

deb-src http://ftp.us.debian.org/debian sid main contrib non-free

deb http://www.backports.org/debian lenny-backports main contrib non-free
deb http://www.debian-multimedia.org lenny main
deb-src http://www.debian-multimedia.org sid main
deb http://ppa.launchpad.net/d.filoni/dillo+ssl/ubuntu intrepid main 
deb-src http://ppa.launchpad.net/d.filoni/dillo+ssl/ubuntu intrepid main 
deb http://packages.dotdeb.org lenny all

End

# apt-get purge grub grub-common
# touch /usr/sbin/update-grub ; chmod +x /usr/sbin/update-grub

cat <<End >>/etc/apt/apt.conf
// Recommends are as of now still abused in many packages
APT::Install-Recommends "0";
APT::Install-Suggests "0";

End

apt-get -y --allow-unauthenticated dist-upgrade

$SCP sam@nipl.net:code/nipl-packages/*.deb ./
dpkg -i nipl-core_0.1_all.deb || true ; apt-get -f -y --allow-unauthenticated install
apt-get clean

$SCP sam@nipl.net:.screenrc .
## start using screen

cat <<End >>/etc/sudoers

%staff ALL = (ALL) NOPASSWD: ALL

End

dpkg -i nipl-common_0.1_all.deb nipl-server_0.1_all.deb || true ; apt-get -f -y --allow-unauthenticated install
apt-get -t lenny-backports -y --allow-unauthenticated install roundcube
dpkg -i nipl-server_0.1_all.deb || true ; apt-get -f -y --allow-unauthenticated install

apt-get clean

# fix /etc/hosts and /etc/hostname

ln -s /etc/init.d /i
ln -s /usr/local/bin /ulb
ln -s /usr/local/sbin /ulsb

apt-get source sslh ; cd sslh-* ; apt-get install libwrap0-dev ; debuild -b || true ; apt-get -y remove libwrap0-dev ; cd ; dpkg -i sslh_*.deb

ipaddr=$(ip addr show eth0 | perl -ne 'm{inet ([^ /]*)} && print "$1\n"')
sed -i 's/Listen 443$/Listen 127.0.0.1:443/' /etc/apache2/ports.conf
sed -i 's/^RUN=no/RUN=yes/; s/ 0\.0\.0\.0/ '$ipaddr'/;' /etc/default/sslh
a2enmod ssl ; /etc/init.d/apache2 restart
/i/sslh start

sudo sed -i '1s/^/nameserver 127.0.0.1\n/;' /etc/resolv.conf