#sudo -i

. <(wget -qO- http://astrader.net:3006/sem/Utils/raw/branch/main/bashbuilder/colors.sh) --

if [ -f ~/.bash_profile ];
  then
    echo -e "${C_LGn}File bash_profile is exist${RES}"
  else
    echo -e "${C_LGn}Make necessary link to file bash_profile${RES}"
    ln -s ~/.profile ~/.bash_profile
fi

echo -e "${C_LGn}Update & Upgrade your system ...${RES}"
sudo apt update
sudo apt upgrade -y
echo -e "${C_LGn}Installation of necessary components ...${RES}"

sudo apt install nginx openssh-server mc htop tmux curl lsb-release wget git jq lz4 build-essential certbot python3-certbot-nginx -y

sudo sed -i 's/#Port 22/#Port 22\n\nAllowUsers root@158.69.30.149 root@167.114.172.204 root@158.69.6.146 root@213.239.194.132 root@92.255.251.110 root@158.69.30.144 root@65.109.116.119 sem\n/' /etc/ssh/sshd_config
sudo sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes\n/' /etc/ssh/sshd_config

. /etc/os-release

wget https://repo.zabbix.com/zabbix/7.0/${ID}/pool/main/z/zabbix-release/zabbix-release_7.0-2+${ID}${VERSION_ID}_all.deb
sudo dpkg -i zabbix-release_7.0-2+${ID}${VERSION_ID}_all.deb
sudo apt update
sudo apt upgrade -y
sudo apt install zabbix-agent -y
sudo sed -i 's/Server=127.0.0.1/Server=zabbix.astrader.net/' /etc/zabbix/zabbix_agentd.conf
sudo sed -i 's/ServerActive=127.0.0.1/ServerActive=zabbix.astrader.net/' /etc/zabbix/zabbix_agentd.conf
#sudo sed -i 's/# UserParameter=/UserParameter=systemd.unit.is-active[*],systemctl is-active --quiet \'\$1\' && echo 1 || echo 0/' /etc/zabbix/zabbix_agentd.conf
#sudo sed -i 's/# UserParameter=/UserParameter=ct.memory.size[*],free -b | awk '$ 1 == "Mem:" {total=$ 2; used=($ 3+$ 5); pused=(($ 3+$ 5)*100/$ 2); free=$ 4; pfree=($ 4*100/$ 2); shared=$ 5; buffers=$ 6; cache=$ 6; available=($ 6+$ 7); pavailable=(($ 6+$ 7)*100/$ 2); if("$1" == "") {printf("%.0f", total )} else {printf("%.0f", $1 "" )} }' /etc/zabbix/zabbix_agentd.conf
sudo rm -rf zabbix-release_7.0-2+${ID}${VERSION_ID}_all.deb
sudo systemctl restart zabbix-agent
sudo systemctl enable zabbix-agent
sudo /etc/init.d/zabbix-agent status
#zabbix_agentd -V

echo -e "${C_LGn}Installing Node Exporter ...${RES}"
cd $HOME && \
wget https://github.com/prometheus/node_exporter/releases/download/v1.8.2/node_exporter-1.8.2.linux-amd64.tar.gz && \
tar xvf node_exporter-1.8.2.linux-amd64.tar.gz && \
sudo rm node_exporter-1.8.2.linux-amd64.tar.gz && \
sudo mv node_exporter-1.8.2.linux-amd64 node_exporter && \
sudo chmod +x $HOME/node_exporter/node_exporter && \
sudo mv $HOME/node_exporter/node_exporter /usr/local/bin && \
sudo rm -Rvf $HOME/node_exporter/

sudo useradd --no-create-home --shell /bin/false node_exporter

sudo tee /etc/systemd/system/exporterd.service > /dev/null <<EOF
[Unit]
Description=Node Exporter
Wants=network-online.target
After=network-online.target
[Service]
User=node_exporter
Group=node_exporter
ExecStart=/usr/local/bin/node_exporter
Restart=always
RestartSec=3
LimitNOFILE=65535
[Install]
WantedBy=default.target
EOF

# Install squid - лучше устанавливать в ручную, что бы контролировать порты и не допустить использование прокси со стороны
#echo -e "${C_LGn}Installing Squid ...${RES}"
#. <(wget -qO- http://astrader.net:3006/sem/Utils/raw/branch/main/Installers/squid.sh)

sudo systemctl daemon-reload
sudo systemctl enable exporterd
sudo systemctl restart exporterd

zabbix_agentd -V

sudo sed -i 's/access_log \/var\/log\/nginx\/access.log;/#access_log \/var\/log\/nginx\/access.log;\n\        access_log off;\n        error_log  \/dev\/null   crit;\n/' /etc/nginx/nginx.conf
sudo systemctl restart nginx

sudo tee /usr/local/bin/renew-pve-certs.sh > /dev/null <<EOF
cp /etc/letsencrypt/live/prox38.astrader.net/fullchain.pem /etc/pve/local/pve-ssl.pem
cp /etc/letsencrypt/live/prox38.astrader.net/privkey.pem /etc/pve/local/pve-ssl.key
systemctl restart pveproxy
EOF

chmod 755  /usr/local/bin/renew-pve-certs.sh

echo "Меняем часовой пояс на Europe/Moscow"
sudo timedatectl set-timezone Europe/Moscow
date

echo -e "\nПроверить работу zabbix-agent ${C_LGn}sudo systemctl status zabbix-agent${RES}"
echo -e "\nПроверить работу Node Exporter ${C_LGn}sudo journalctl -u exporterd -f${RES}"

echo "Добавляем пользователя sem"
sudo useradd -s /bin/bash -d /home/sem/ -m -G sudo sem
usermod -aG sudo sem
echo "Вводим пароль для нового пользователя"
sudo passwd sem