#!/bin/bash
echo
echo "######################################"
read -p "Start installation - initial software - press Enter to start"
sudo rfkill unblock wlan
sudo apt-get install -y software-properties-common 
sudo add-apt-repository ppa:ondrej/php
sudo apt-get install -y dhcpcd5
sudo apt-get install -y libjson-glib-dev

echo
echo "######################################"

read -p "Installing isoquery - check result of the -v - press Enter to start"
wget https://ftp.debian.org/debian/pool/main/i/isoquery/isoquery_3.3.4-1+b1_arm64.deb -P /tmp
sudo dpkg -x /tmp/isoquery_3.3.4-1+b1_arm64.deb /tmp/isoquery/
sudo cp /tmp/isoquery/usr/bin/isoquery /usr/local/bin/
sudo chmod +x /usr/local/bin/isoquery
isoquery -v

echo
echo "######################################"
read -p "Stop resolved and add parms - press Enter to start"
sudo systemctl stop systemd-resolved.service
echo "DNS=9.9.9.9" | sudo tee -a /etc/systemd/resolved.conf
echo "DNSStubListener=no" | sudo tee -a /etc/systemd/resolved.conf
sudo ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf

echo
echo "######################################"
read -p "Install most of the software - press Enter to start"
sudo apt-get install -y lighttpd git hostapd dnsmasq iptables-persistent vnstat qrencode php8.2-cgi jq isoquery

echo
echo "######################################"
read -p "Enable php and start lighttpd - press Enter to start"
sudo lighttpd-enable-mod fastcgi-php    
sudo service lighttpd force-reload
sudo systemctl restart lighttpd.service

echo
echo "######################################"
read -p "Pull the web application - press Enter to start"
sudo rm -rf /var/www/html

sudo git clone --recurse-submodules https://github.com/RaspAP/raspap-webgui /var/www/html
sudo git -C /var/www/html submodule update --remote plugins

WEBROOT="/var/www/html"
CONFSRC="$WEBROOT/config/50-raspap-router.conf"
LTROOT=$(grep "server.document-root" /etc/lighttpd/lighttpd.conf | awk -F '=' '{print $2}' | tr -d " \"")

HTROOT=${WEBROOT/$LTROOT}
HTROOT=$(echo "$HTROOT" | sed -e 's/\/$//')
awk "{gsub(\"/REPLACE_ME\",\"$HTROOT\")}1" $CONFSRC > /tmp/50-raspap-router.conf
sudo cp /tmp/50-raspap-router.conf /etc/lighttpd/conf-available/

sudo ln -s /etc/lighttpd/conf-available/50-raspap-router.conf /etc/lighttpd/conf-enabled/50-raspap-router.conf
sudo systemctl restart lighttpd.service


echo
echo "######################################"
read -p "Configure and setup software - press Enter to start"

cd /var/www/html
sudo cp installers/raspap.sudoers /etc/sudoers.d/090_raspap

sudo mkdir /etc/raspap/
sudo mkdir /etc/raspap/backups
sudo mkdir /etc/raspap/networking
sudo mkdir /etc/raspap/hostapd
sudo mkdir /etc/raspap/lighttpd
sudo mkdir /etc/raspap/system
sudo mkdir /etc/raspap/plugins
sudo chown -R www-data:www-data /var/www/html
sudo chown -R www-data:www-data /etc/raspap
sudo mv installers/enablelog.sh /etc/raspap/hostapd
sudo mv installers/disablelog.sh /etc/raspap/hostapd
sudo mv installers/servicestart.sh /etc/raspap/hostapd
sudo mv installers/debuglog.sh /etc/raspap/system
sudo mv installers/plugin_helper.sh /etc/raspap/plugins
sudo chown -c root:root /etc/raspap/hostapd/*.sh
sudo chown -c root:root /etc/raspap/system/*.sh
sudo chown -c root:root /etc/raspap/plugins/*.sh

sudo chmod 750 /etc/raspap/hostapd/*.sh
sudo chmod 750 /etc/raspap/system/*.sh
sudo chmod 750 /etc/raspap/plugins/*.sh
sudo cp installers/configport.sh /etc/raspap/lighttpd
sudo chown -c root:root /etc/raspap/lighttpd/*.sh

sudo mv installers/raspapd.service /lib/systemd/system
sudo systemctl daemon-reload
sudo systemctl enable raspapd.service

echo
echo "######################################"
read -p "Install default configuration - press Enter to start"
sudo mv /etc/default/hostapd ~/default_hostapd.old
sudo cp /etc/hostapd/hostapd.conf ~/hostapd.conf.old
sudo cp config/hostapd.conf /etc/hostapd/hostapd.conf
sudo cp config/090_raspap.conf /etc/dnsmasq.d/090_raspap.conf
sudo cp config/090_wlan0.conf /etc/dnsmasq.d/090_wlan0.conf
sudo cp config/dhcpcd.conf /etc/dhcpcd.conf
sudo cp config/config.php /var/www/html/includes/
sudo cp config/defaults.json /etc/raspap/networking/

echo
echo "######################################"
read -p "Disable systemd-networkd - press Enter to start"
sudo systemctl stop systemd-networkd
sudo systemctl disable systemd-networkd
sudo cp config/raspap-bridge-br0.netdev /etc/systemd/network/raspap-bridge-br0.netdev
sudo cp config/raspap-br0-member-eth0.network /etc/systemd/network/raspap-br0-member-eth0.network

echo
echo "######################################"
read -p "ip4 forwarding and MASQ - press Enter to start"
echo "net.ipv4.ip_forward=1" | sudo tee /etc/sysctl.d/90_raspap.conf > /dev/null
sudo sysctl -p /etc/sysctl.d/90_raspap.conf
sudo /etc/init.d/procps restart

sudo iptables -t nat -A POSTROUTING -j MASQUERADE
sudo iptables -t nat -A POSTROUTING -s 192.168.50.0/24 ! -d 192.168.50.0/24 -j MASQUERADE
sudo iptables-save | sudo tee /etc/iptables/rules.v4

echo
echo "######################################"
read -p "Start hostapd - press Enter to start"
sudo systemctl unmask hostapd.service
sudo systemctl enable hostapd.service

echo
echo "######################################"
read -p "Install OpenVPN - press Enter to start"
sudo apt-get install -y openvpn
sudo sed -i "s/\('RASPI_OPENVPN_ENABLED', \)false/\1true/g" /var/www/html/includes/config.php
sudo systemctl enable openvpn-client@client

echo
echo "######################################"
read -p "Install Wireguard - press Enter to start"
sudo apt-get install -y wireguard
sudo sed -i "s/\('RASPI_WIREGUARD_ENABLED', \)false/\1true/g" /var/www/html/includes/config.php
sudo systemctl enable wg-quick@wg

echo
echo "######################################"
read -p "Install adblock - press Enter to start"
sudo mkdir /etc/raspap/adblock
wget https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts -O /tmp/hostnames.txt
wget https://big.oisd.nl/dnsmasq -O /tmp/domains.txt
sudo cp /tmp/hostnames.txt /etc/raspap/adblock
sudo cp /tmp/domains.txt /etc/raspap/adblock 
sudo cp installers/update_blocklist.sh /etc/raspap/adblock/
sudo chown -c root:www-data /etc/raspap/adblock/*.*
sudo chmod 750 /etc/raspap/adblock/*.sh
sudo touch /etc/dnsmasq.d/090_adblock.conf
echo "conf-file=/etc/raspap/adblock/domains.txt" | sudo tee -a /etc/dnsmasq.d/090_adblock.conf > /dev/null 
echo "addn-hosts=/etc/raspap/adblock/hostnames.txt" | sudo tee -a /etc/dnsmasq.d/090_adblock.conf > /dev/null
sudo sed -i '/dhcp-option=6/d' /etc/dnsmasq.d/090_raspap.conf
sudo sed -i "s/\('RASPI_ADBLOCK_ENABLED', \)false/\1true/g" includes/config.php

echo
echo "######################################"
read -p "Stop and disable wpa_supplicant - press Enter to start"
sudo systemctl stop wpa_supplicant.service
sudo systemctl disable wpa_supplicant.service
sudo systemctl mask wpa_supplicant.service

echo
echo "######################################"
read -p "Stop NetworkManager managing wlan0 - press Enter to start"
echo "[keyfile]" | sudo tee -a /etc/NetworkManager/conf.d/99-unmanaged-devices.conf
echo "unmanaged-devices=interface-name:wlan0" | sudo tee -a /etc/NetworkManager/conf.d/99-unmanaged-devices.conf


echo
echo "######################################"
read -p "Rebooting - Good Luck!!! - press Enter to start"
sudo systemctl reboot

 public function getConnectionType(): string
    {
        // get the interface associated with the default route
        $interface = trim(shell_exec("ip route show default | head -1 | awk '{print $5}'"));

        if (empty($interface)) {
            return 'unknown';
        }
        // classify interface type
        if (preg_match('/^eth0|enp\d+s\d+|ens\d+s\d+|end[0-9]|enx[0-9a-f]*/', $interface)) {
            return 'ethernet';
        }
        if (preg_match('/^wlan\d+|wlp\d+s\d+|wlx[0-9a-f]*/', $interface)) {
            return 'wireless';
        }
        if (preg_match('/^usb\d+|^eth[1-9]\d*/', $interface)) {
            return 'tethering';
        }
        if (preg_match('/^ppp\d+|wwan\d+|wwp\d+s\d+/', $interface)) {
            return 'cellular';
        }

        // if none match, return the interface name as a fallback
        return "other ($interface)";
    }

 public function getWirelessClients($interface): int
    {
        $cmd = 'ip n | grep  '. escapeshellarg($interface) .' | egrep \'DELAY|REACHABLE|PROBE\'';
        exec($cmd, $output, $status);

        if ($status !== 0) {
            return 0;
        }
        // enumerate 'station' entries (each represents a wireless client)
        $clientCount = 0;
        foreach ($output as $line) {
                $clientCount++;
        }
        return $clientCount;
    }

public function getFrequencyBand(string $interface): ?string
    {
        $output = shell_exec("cat /etc/hostapd/hostapd.conf | grep channel= | awk 'BEGIN{FS=\"=\"}{ print $2 }'");
        if (!$output) {
            return null;
        }
        $frequency = (int)$output;

        if ($frequency < 15 ) {
                return "2.4";
        }
        return "5";
    }