# Link dotfiles and set up environment. Run as unpriviledges sudoers user.
make all
# Install essential executables. Can be run as root (for essentials)
make -f Installers.make essentials
# Install facelapse prerequisites (as unprivildeged)
make -f Installers.make facelapse

#!/bin/bash
set -euo pipefail

USERNAME=cyrill

# Create user and immediately expire password to force a change on login
useradd --create-home --shell "/bin/bash" --groups sudo "${USERNAME}"
passwd --delete "${USERNAME}"
chage --lastday 0 "${USERNAME}"

# Create SSH directory for sudo user and move keys over
home_directory="$(eval echo ~${USERNAME})"
mkdir --parents "${home_directory}/.ssh"
cp /root/.ssh/authorized_keys "${home_directory}/.ssh"
chmod 0700 "${home_directory}/.ssh"
chmod 0600 "${home_directory}/.ssh/authorized_keys"
chown --recursive "${USERNAME}":"${USERNAME}" "${home_directory}/.ssh"

# Disable root SSH login with password
sed --in-place 's/^PermitRootLogin.*/PermitRootLogin prohibit-password/g' /etc/ssh/sshd_config
if sshd -t -q; then systemctl restart sshd; fi

# Set up dotfiles and install programs
git clone https://github.com/Indeximal/dotfiles.git ${home_directory}/dotfiles
chown -R cyrill:cyrill dotfiles/
cd ${home_directory}/dotfiles
apt install make
make -f Installers.make essentials
# make all  # only works for the current user, which is root in this script