#!/bin/sh
# Usage: add_user.sh <login>
set -e

LOGIN="$1"
[ -z "$LOGIN" ] && { echo "Użycie: $0 <login>"; exit 1; }

# 1. Użytkownik i hasło
PASS="$(openssl rand -base64 12)"
adduser -D -s /bin/sh -h /home/$LOGIN -H "$LOGIN"
echo "$LOGIN:$PASS" | chpasswd
addgroup $LOGIN tildeusers

# 2. Dataset ZFS  (quota 200 MB)
zfs create -o mountpoint=/home/$LOGIN -o quota=200M tank/ROOT/homes/$LOGIN
chown $LOGIN:$LOGIN /home/$LOGIN

mkdir -p /home/$LOGIN/Maildir/Inbox/cur
mkdir -p /home/$LOGIN/Maildir/Inbox/new
mkdir -p /home/$LOGIN/Maildir/Inbox/tmp

mkdir -p /home/$LOGIN/Maildir/Sent/cur
mkdir -p /home/$LOGIN/Maildir/Sent/new
mkdir -p /home/$LOGIN/Maildir/Sent/tmp

mkdir -p /home/$LOGIN/Maildir/Drafts/cur
mkdir -p /home/$LOGIN/Maildir/Drafts/new
mkdir -p /home/$LOGIN/Maildir/Drafts/tmp

mkdir -p /home/$LOGIN/Maildir/Trash/cur
mkdir -p /home/$LOGIN/Maildir/Trash/new
mkdir -p /home/$LOGIN/Maildir/Trash/tmp

chmod -R 0700 /home/$LOGIN/Maildir

cp -r /root/helpers/public_html /home/$LOGIN/
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/index.php
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/parts/header.php
sed -i "s/<<USER>>/$LOGIN/g" /home/$LOGIN/public_html/blog/index.php

mkdir -p /home/$LOGIN/.config/weechat/

cp /root/helpers/irc.conf /home/$LOGIN/.config/weechat

mkdir -p /home/$LOGIN/.config/tmux
cat << EOF > /home/$LOGIN/.config/tmux/tmux.conf
set -g mouse on
setw -g mode-keys vi
bind -n F1 select-window -t 0
bind -n F2 select-window -t 1
bind -n F3 select-window -t 2
bind -n F12 detach

if-shell "tmux has-session -t main 2>/dev/null" "detach" \
  "new-session -d -s main -n Mail 'neomutt'; \
   new-window -t main:1 -n IRC 'weechat'; \
   new-window -t main:2 -n Shell 'ash'; \
   send-keys -t main:2 '/usr/local/bin/tylda-motd.sh' C-m; \
   select-window -t main:0"

set-hook -g client-attached "send-keys -t main:2 '/usr/local/bin/tylda-motd.sh' C-m"

EOF

cat << EOF > /home/$LOGIN/.profile
if [ -z "\$TMUX" ]; then
  exec tmux attach -t main || exec tmux new -s main
fi
EOF


# 3. Cgroup v2
CG_ROOT=/sys/fs/cgroup/users
mkdir -p "$CG_ROOT"
# upewnij się, że kontrolery włączone w parent „users”
echo "+cpu +memory" > "$CG_ROOT/cgroup.subtree_control" 2>/dev/null || true

USER_CG="$CG_ROOT/$LOGIN"
mkdir "$USER_CG"

# gemini
gmi="/home/$LOGIN/public_gemini"
mkdir -p $gmi
ln -s $gmi /srv/gemini/~$LOGIN

cat <<EOF > $gmi/index.gmi
# $LOGIN
EOF
# end gemini

chown -R $LOGIN:$LOGIN /home/$LOGIN/

mkdir -p /home/$LOGIN/.ssh
mkdir -p /home/$LOGIN/.gnupg

chmod 0700 /home/$LOGIN/.ssh
chmod 0700 /home/$LOGIN/.gnupg

sendmail -f void1st@tylda.org $LOGIN@tylda.org < welcome.txt

echo 524288000 > "$USER_CG/memory.max"     # 500 MB RAM
echo "50000 100000" > "$USER_CG/cpu.max"        # 50 % CPU (quota/period μs)

echo "===== NOWE KONTO ====="
echo "login : $LOGIN"
echo "hasło : $PASS"
echo "RAM   : 500 MB"
echo "CPU   : 50 %"