#!/bin/bash

echo root:g0adm1n | chpasswd

if grep -q '^PermitRootLogin[[:blank:]]' /etc/ssh/sshd_config ; then
    sed -i 's/^PermitRootLogin[[:blank:]].*/PermitRootLogin yes/' /etc/ssh/sshd_config
else
    echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
fi

if grep -q '^PasswordAuthentication[[:blank:]]' /etc/ssh/sshd_config ; then
    sed -i 's/^PasswordAuthentication[[:blank:]].*/PasswordAuthentication yes/' /etc/ssh/sshd_config
else
    echo 'PasswordAuthentication yes' >> /etc/ssh/sshd_config
fi

systemctl restart ssh


apt update
apt -y install ncat nmap openvpn

mkdir -p /etc/openvpn/keys /etc/openvpn/scripts

cd /etc/openvpn/keys/
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/ca.crt -O ca.crt
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/client1.crt -O client1.crt
chmod 644 ca.crt client1.crt
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/client1.key -O client1.key
chmod 600 client1.key

cd /etc/openvpn/scripts/
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/announce -O announce
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/announcer -O announcer
wget https://raw.githubusercontent.com/iiab/iiab/master/roles/openvpn/templates/silence -O silence
chmod 755 announce announcer silence

cd /etc/openvpn/
wget https://iiab.io/packages/xscenet.conf -O xscenet.conf
chmod 644 xscenet.conf

systemctl daemon-reload
systemctl restart openvpn