#!/bin/bash

# Openvz7 install

# New Server Install - BigScoots.com
# Install Tools and update system

yum -y install nano ntp mailx pciutils bind-utils traceroute nmap screen yum-utils net-tools dos2unix lshw python python-ctypes iotop ncurses-devel libpcap-devel gcc make wget curl unzip wget mailx git
yum -y update

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

setenforce 0
ntpdate pool.ntp.org
systemctl enable ntpd
systemctl start ntpd
sysctl -w net.ipv6.conf.default.disable_ipv6=0
sysctl -w net.ipv6.conf.all.disable_ipv6=0
sysctl -w vm.swappiness=0

cd /
git clone https://github.com/jcatello/bigscoots
source /bigscoots/includes/common.sh

mkdir -p /root/.ssh
touch /root/.ssh/authorized_keys
chmod 700 /root/.ssh
chmod 600 /root/.ssh/authorized_keys
echo > /root/.ssh/authorized_keys

cat <<EOF >> /root/.ssh/authorized_keys
# WPO NEXUS - BigScoots.com
from="67.202.70.147" ssh-rsa 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 [email protected]
# WPO NEXUS 25519 - BigScoots.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAmC2H7VaBxryD+DKZ/RIVe0nKxRGRn7VgbYDGnsFF2D nexus25519
# Office 1 - BigScoots.com
ssh-rsa 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 rsa-key-20161116
# Office Chris  - BigScoots.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICWodivbZgy6i5sLTj8RtTs/Mk1nc09aHFeoTDaUeJZU [email protected]
# N8N  - BigScoots.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICi5O1QZGv8jClJcUYKnD6NCXu1CZZc90cLAQprskPsh
EOF

# Check for raid

grep Personalities /proc/mdstat | grep raid 2>/dev/null
if [ "$?" -eq "0" ]
then
  rm -f /etc/cron.daily/raid
  kill -9 "$(pgrep mdadm)"
  sed -i '/MAILADDR/c\MAILADDR [email protected]' /etc/mdadm.conf
  echo "DEVICE partitions" >> /etc/mdadm.conf
  echo "/sbin/mdadm --monitor --scan --daemonize" >> /etc/rc.local
  /sbin/mdadm --monitor /dev/md125 --test &
  sleep 5 ; kill -9 "$(pgrep mdadm)"
  /sbin/mdadm --monitor --scan --daemonize
  elif [ "$?" -eq "1" ]
	then
    lshw -C storage | grep "vendor: LSI\|vendor: Broadcom" 2>/dev/null 
    if [ "$?" -eq "0" ]
    then
      mkdir -p /tmp/lsi
      cd /tmp/lsi || exit
      wget https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/8-07-14_MegaCLI.zip
      unzip ./*MegaCLI.zip
      rpm -ivh ./*inux/MegaCli-*.noarch.rpm
      ln -s /opt/MegaRAID/MegaCli/MegaCli64 /sbin/
      ln -s /opt/MegaRAID/MegaCli/MegaCli64 /usr/local/sbin/
      cd ~ || exit ; wget https://www.bigscoots.com/downloads/lsi.zip ; unzip lsi.zip
      chmod +x lsi.sh
      /opt/MegaRAID/MegaCli/MegaCli64 -LDSetProp -WT -Immediate -Lall -aAll
      /opt/MegaRAID/MegaCli/MegaCli64 -LDSetProp -NORA -Immediate -Lall -aAll
      /opt/MegaRAID/MegaCli/MegaCli64 -LDSetProp -Direct -Immediate -Lall -aAll
      (crontab -l ; echo "0 * * * * ~/lsi.sh checkNemail") | crontab - .
      rm -f /etc/cron.daily/raid
    fi
fi

sed -ie 's/#Port.*[0-9]$/Port 2222/gI' /etc/ssh/sshd_config
sed -i 's/#UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config
sed -i 's/#PermitRootLogin yes/PermitRootLogin without-password/g' /etc/ssh/sshd_config
service sshd restart

sysctl -w net.ipv4.conf.all.rp_filter=2
echo 'net.ipv4.conf.all.rp_filter=2' >> /etc/sysctl.conf
echo 1 > /proc/sys/net/ipv4/ip_nonlocal_bind

echo 'QUOTAUGIDLIMIT="1"' >> /etc/vz/conf/ve-vswap-solus.conf-sample
sed -i '/DISKSPACE/c\DISKSPACE="4294967296:4294967296"' /etc/vz/conf/vps.vzpkgtools.conf-sample

crontab -l | { cat; echo "* * * * * bash /bigscoots/ovz/node/monitor.sh"; } | crontab -
crontab -l | { cat; echo "0 0 * * * bash /bigscoots/ovz/node/vzbackup_wrapper.sh >/dev/null 2>&1"; } | crontab -

rm -f /usr/libexec/ovz-template-converter
wget -O /usr/libexec/ovz-template-converter https://raw.githubusercontent.com/solusvm-support/svm_patches/master/ovz-template-converter.patched
chmod +x /usr/libexec/ovz-template-converter
yum install python36-pip -y
pip3 install configobj

yum install vzpkg* centos-7-x86_64-ez.noarch almalinux-8-x86_64-ez.noarch almalinux-9-x86_64-ez.noarch ubuntu-20.04-x86_64-ez.noarch ubuntu-22.04-x86_64-ez.noarch -y

mkdir -p /vz/template/cache
wget https://backup18.bigscoots.com/almalinux-9-x86_64-wpo.tar.gz -O /vz/template/cache/almalinux-9-x86_64-wpo.tar.gz
/usr/libexec/ovz-template-converter --verbose /vz/template/cache/almalinux-9-x86_64-wpo.tar.gz

wget -O /root/install.sh https://files.soluslabs.com/install.sh
bash /root/install.sh -k SVMEL-OHI03-5QTXL-YQU1Q-WPY1J-6EFKR-CKRVU <<EOF
1
EOF