init.sh

#!/bin/bash

. ./helpers.sh

heading 'Checking for secondary sudo user...'

USERNAME=$(prompt_input "Enter a secondary admin username (default: serveradmin): ");

if [ -z "$USERNAME" ]; then
    echo ""
    USERNAME="serveradmin"
fi

if [ $(grep -ic $USERNAME /etc/passwd) = 0 ];
then
    echo "Secondary admin $(tput bold)${USERNAME}$(tput sgr 0) not found, creating..."
    RANDOM_PASSWORD=$(openssl rand -base64 12)
    PASSWORD=$(prompt_input "Enter a password (leave empty to generate random one): " "-s");
    if [ -z "$PASSWORD" ]; then
        PASSWORD=$RANDOM_PASSWORD
    fi

    echo '';

    adduser --gecos "" --disabled-password $USERNAME ## >/dev/null 2>&1
    echo "$USERNAME:$PASSWORD" | sudo chpasswd
    usermod -aG sudo $USERNAME ## >/dev/null 2>&1

    if [ "$RANDOM_PASSWORD" = "$PASSWORD" ]; then
        USER_HOMEDIR=$(getent passwd $USERNAME | cut -d: -f6)
        USER_PASSWD_FILE=$USER_HOMEDIR/.sshpwd
        echo $PASSWORD | sudo tee $USER_PASSWD_FILE ## >/dev/null 2>&1
        echo "Password Generated: $(tput bold)${USER_PASSWD_FILE}$(tput sgr 0)";
    fi

    echo "User $(tput bold)${USERNAME}$(tput sgr 0) created. continue..."
else
    echo "User $(tput bold)${USERNAME}$(tput sgr 0) already exists. continue..."
fi

if [ $(grep -ic "^pwdfree:" /etc/group) = 0 ];
then
    groupadd pwdfree
    echo "%pwdfree ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/pwdfree ## >/dev/null 2>&1
fi

usermod -aG pwdfree $USERNAME
USER_HOMEDIR=$(getent passwd $USERNAME | cut -d: -f6)
sudo -u $USERNAME git clone --branch temp https://github.com/alan-chen-la-478/Nginx-Reversed-LAMP-Full-Stack.git $USER_HOMEDIR/server-setup
sudo chown $USERNAME: -R $USER_HOMEDIR/server-setup
sudo -u $USERNAME bash ./install.sh
deluser $USERNAME pwdfree

sudo rm -Rf ~/server-setup

# sudo systemctl start fail2ban
# sudo fail2ban-client set sshd addignoreip $(who -m | awk '{print $NF}') ## >/dev/null 2>&1

heading '✨ DONE!! Rebooting... Please login with your new user after reboot'
echo "$USERNAME:$PASSWORD"
history -c

sudo reboot