#!/usr/bin/env bash
#
# Tor desktop provision example
#
# Copyright (C) 2017 Silvio Rhatto - rhatto at riseup.net
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published
# by the Free Software Foundation, either version 3 of the License,
# or any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

# Parameters
DIRNAME="`dirname $0`"
BASENAME="`basename $0`"
HOSTNAME="$1"
DOMAIN="$2"
MIRROR="$3"
APT_INSTALL="sudo LC_ALL=C DEBIAN_FRONTEND=noninteractive apt-get install -y"

# Dependencies
$APT_INSTALL tor iptables

# Firewall config
sudo cp $DIRNAME/files/tor-transproxy/etc/network/if-pre-up.d/iptables /etc/network/if-pre-up.d/iptables
sudo /etc/network/if-pre-up.d/iptables

# DNS config
echo "nameserver 127.0.0.1" | sudo tee /etc/resolv.conf > /dev/null

# Tor config
sudo cp $DIRNAME/files/tor-transproxy/etc/tor/torrc /etc/tor/torrc
sudo service tor restart

# Tor Browser config to use the system-installed tor daemon
# See https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ
if [ -e "$HOME/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser" ]; then
  # Force about:config preferences
  sudo cp $DIRNAME/files/tor-transproxy/tbb/user.js $HOME/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Browser/profile.default/user.js

  # Hard code control port password into the start-tor-browser script
  sed -i -e "s/setControlPortPasswd \${TOR_CONTROL_PASSWD:='\"secret\"'/setControlPortPasswd \${TOR_CONTROL_PASSWD:='\"\"'}/" \
    $HOME/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/start-tor-browser
fi