#!/bin/bash

# Farger for tilbakemelding
GREEN='\033[0;32m'
RED='\033[0;31m'
NC='\033[0m'

echo -e "${GREEN}==> Starter Homelab Bootstrap (Linux)${NC}"

# 1. Sjekk om vi er root
if [ "$EUID" -ne 0 ]; then
    echo -e "${RED}Feil: Vennligst kjør som root (bruk sudo)${NC}"
    exit 1
fi

# 2. Installer nødvendige pakker
echo -e "==> Installerer basispakker..."
apt-get update && apt-get install -y sudo python3 curl

# 3. Opprett github-runner bruker
if ! id "github-runner" &>/dev/null; then
    echo -e "==> Oppretter bruker: github-runner"
    adduser --disabled-password --gecos "" github-runner
else
    echo -e "==> Bruker 'github-runner' finnes already."
fi

# 4. Sett opp passordløs sudo
echo -e "==> Konfigurerer passordløs sudo..."
echo "github-runner ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/github-runner
chmod 0440 /etc/sudoers.d/github-runner

# 5. Legg til SSH-nøkkel
# Jeg har brukt nøkkelen fra din forrige melding
RUNNER_KEY="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtKIfNI3Fvj5BFXEDX6JP+zyfxL8pvV72NUNxSQ/jys github-runner"
USER_HOME="/home/github-runner"

sudo -u github-runner mkdir -p $USER_HOME/.ssh
sudo -u github-runner chmod 700 $USER_HOME/.ssh
echo "$RUNNER_KEY" | sudo -u github-runner tee $USER_HOME/.ssh/authorized_keys > /dev/null
sudo -u github-runner chmod 600 $USER_HOME/.ssh/authorized_keys

# 6. Ferdig!
IP_ADDR=$(hostname -I | awk '{print $1}')

echo -e "${GREEN}--------------------------------------------------${NC}"
echo -e "${GREEN}BOOTSTRAP FERDIG!${NC}"
echo -e "Serveren er nå klar for Ansible."
echo -e "Logg inn med: ${GREEN}ssh github-runner@$IP_ADDR${NC}"
echo -e "${GREEN}--------------------------------------------------${NC}"