#!/bin/bash

#License
clear
echo 'MIT License'
echo ''
echo 'Copyright (c) 2018 jacktooandroid'
echo 'enhanced by steigerbalett for RaspberryPi 2018'
echo ''
echo 'Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:'
echo ''
echo 'The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.'
echo ''
echo 'THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.'
echo ''
echo -e "\033[1;31mVERSION: 2021-10-04\033[0m"
echo ''
echo 'Installation will continue in 3 seconds...'
echo ''
sleep 3

#Prerequisites
clear
echo Prerequisites: Checking if you are running as root...
idinfo=$(id -u)
if [[ idinfo -eq 0 ]]
  then
    echo 'You are running as root! :-)'
else
  echo 'You are not running as root :-('
  echo 'This script has to run in SUDO mode to run smoothly!'
  exit
fi

#RaspberryPi Tweaks
echo ""
echo "========================"
echo "RaspberryPi Tweaks"
echo "========================"
echo ""
if grep hdmi_blanking=1 /boot/config.txt; then
  echo "HDMI tweak already set"
else
echo "Turn off HDMI without connected Monitor"
echo "========================"
echo "" >> /boot/config.txt
echo "# Turn off HDMI without connected Monitor" >> /boot/config.txt
echo "hdmi_blanking=1" >> /boot/config.txt
echo "" >> /boot/config.txt
echo "# disable HDMI audio" >> /boot/config.txt
echo "hdmi_drive=1" >> /boot/config.txt
fi
echo ""
echo "" >> /boot/config.txt
echo "# disable the splash screen" >> /boot/config.txt
echo "disable_splash=1" >> /boot/config.txt
echo "" >> /boot/config.txt
echo "# disable overscan" >> /boot/config.txt
echo "disable_overscan=1" >> /boot/config.txt
echo ""
echo "Enable Hardware watchdog"
echo "========================"
echo "" >> /boot/config.txt
echo "# activating the hardware watchdog" >> /boot/config.txt
echo "dtparam=watchdog=on" >> /boot/config.txt
echo ""
echo "Disable search for SD after USB boot"
echo "========================"
echo "" >> /boot/config.txt
echo "# stopp searching for SD-Card after boot" >> /boot/config.txt
echo "dtoverlay=sdtweak,poll_once" >> /boot/config.txt
echo ""
echo ""

# add NTP updateadress
ntpdate -u de.pool.ntp.org

# Einstellen der Zeitzone und Zeitsynchronisierung per Internet: Berlin
sudo timedatectl set-timezone Europe/Berlin
sudo timedatectl set-ntp true

# Hostname setzen
sudo hostnamectl set-hostname unifi

# SSH
echo 'SSH connection'
echo "========================"
echo 'SSH service is not running by default, you have to enable it'
echo -n 'Do you want to activate SSH permanently [Y/n] '
read disablesshdecision

if [[ $disablesshdecision =~ (Y|y) ]]
  then
sudo systemctl enable ssh.service
sudo systemctl start ssh.service
elif [[ $disablesshdecision =~ (n) ]]
  then
sudo systemctl stop ssh.service
sudo systemctl disable ssh.service
sudo rm /boot/ssh
else
    echo 'Invalid input!'
fi

# add NTP updateadress
ntpdate -u de.pool.ntp.org

# Einstellen der Zeitzone und Zeitsynchronisierung per Internet: Berlin
sudo timedatectl set-timezone Europe/Berlin
sudo timedatectl set-ntp true

# Hostname setzen
sudo hostnamectl set-hostname unifipi

#Checking Memory Requirements
echo ""
echo 'Step 1: Checking minimum system memory requirements...'
memtotal=$(cat /proc/meminfo | grep MemTotal | grep -o '[0-9]*')
swaptotal=$(cat /proc/meminfo | grep SwapTotal | grep -o '[0-9]*')
echo Your total system memory is $memtotal
echo Your total system swap is $swaptotal
totalmem=$(($memtotal + $swaptotal))
echo Your effective total system memory is $totalmem

if [[ $totalmem -lt 900000 ]]
  then
    echo You have insufficient memory to install Ubiquiti UniFi Controller, minimum 1 GB
    echo -n 'Do you want to create a 1 G swap file? [Y/n] '
    read swapfiledecision
      if [[ $swapfiledecision =~ (Y|y) ]]
        then
          echo 'Creating 1 G swap file...'
            sudo fallocate -l 1G /swapfile
            sudo chmod 600 /swapfile
            sudo mkswap /swapfile
            sudo swapon /swapfile
            sudo cp /etc/fstab /etc/fstab.bak
            echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab > /dev/null
          echo '1 G swap file successfully created!'
      elif [[ $swapfiledecision =~ (n) ]]
        then
          echo No swap file was created!
          echo Insufficient memory to install Ubiquiti UniFi Controller
          echo Exiting...
          exit
      else
        echo Input error!
        echo No swap file was created!
        echo Please start again
        echo Exiting...
        exit
      fi
else
  echo 'You have enough memory to meet the requirements! :-)'
fi

#Wi-Fi connection configuration
echo ""
echo 'Wi-Fi connection Configuration'
echo -n 'Do you want to configure your Wi-Fi connection? [Y/n] '
read wificonnectiondecision

if [[ $wificonnectiondecision =~ (Y|y) ]]
  then
    echo -n 'Your SSID: '
    read  wifissid
    echo -n 'Your Password: '
    read wifipassword
    wpa_passphrase "$wifissid" "$wifipassword" | sudo tee -a /etc/wpa_supplicant/wpa_supplicant.conf
    wpa_cli -i wlan0 reconfigure
    echo 'Wi-Fi connection configured!'
elif [[ $wificonnectiondecision =~ (n) ]]
  then
    echo 'No modifications was made'
    echo 'You can visit https://www.raspberrypi.org/documentation/configuration/wireless/wireless-cli.md to setup your Wi-Fi connection later.'
else
    echo 'Invalid input!'
    echo 'You can visit https://www.raspberrypi.org/documentation/configuration/wireless/wireless-cli.md to setup your Wi-Fi connection later.'
fi

#Installing Ubiquiti UniFi Controller
clear
echo Step 2: Installing Ubiquiti UniFi Controller...
sudo apt update && install dirmngr ca-certificates apt-transport-https -y
echo 'deb http://www.ui.com/downloads/unifi/debian stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
sudo wget -O /etc/apt/trusted.gpg.d/unifi-repo.gpg https://dl.ui.com/unifi/unifi-repo.gpg
# As the latest raspbian (Raspbian GNU/Linux 9 (stretch)) installed openjdk-9-jdk-headless, unificontroller did not start
sudo apt update && sudo apt full-upgrade -y && sudo apt install openjdk-8-jre-headless ca-certificates-java unifi haveged -y
# change Java 8 as standard
sudo update-alternatives --config java
sudo cp -p /lib/systemd/system/unifi.service /etc/systemd/system
sudo sed -i '/^\[Service\]$/a Environment=JAVA_HOME=/usr/lib/jvm/java-8-openjdk-armhf' /etc/systemd/system/unifi.service
# check for dependencies
sudo apt --fix-broken install -y
# Allow update to new Major Version
sudo apt update --allow-releaseinfo-change

#Configure Ubiquiti UniFi Controller Java Memory (heap size) Allocation
clear
echo Step 3: Advanced settings
echo 'Default Ubiquiti UniFi Controller Java memory allocation (heap size)'
echo Maximum memory allocation: 1024 MB
echo 'Default settings is suitable for almost all use cases, modify ONLY IF NEEDED (large installs, etc.)!'
echo Reboot may be required after modifications!
echo -n 'Do you want to modify the memory allocation for Ubiquiti UniFi Controller? [Y/n] '
read modifymemoryallocationdecision

if [[ $modifymemoryallocationdecision =~ (Y|y) ]]
  then
    echo -n 'How much for maximum memory allocation (heap size) (Minimum Size: 1024 MB)? '
    read maximummemoryallocationdecision
      if [[ $maximummemoryallocationdecision -ge 1024 ]]
        then
          cd /usr/lib/unifi/data
          cat system.properties > /dev/null
          echo '# Modifications' | sudo tee -a /usr/lib/unifi/data/system.properties
          echo unifi.xms=256 | sudo tee -a /usr/lib/unifi/data/system.properties
          echo unifi.xmx="$maximummemoryallocationdecision" | sudo tee -a /usr/lib/unifi/data/system.properties
          sudo service unifi restart
      else
        echo 'Your input is lower than the requirement to run Ubiquiti UniFi Controller (1024 MB)!'
        echo No modifications was made
        cd /usr/lib/unifi/data
        cat system.properties > /dev/null
        echo '# Modifications' | sudo tee -a /usr/lib/unifi/data/system.properties > /dev/null
        echo unifi.xms=256 | sudo tee -a /usr/lib/unifi/data/system.properties
        echo unifi.xmx=1024 | sudo tee -a /usr/lib/unifi/data/system.properties
      fi
elif [[ $modifymemoryallocationdecision =~ (n) ]]
  then
    echo No modifications was made
    cd /usr/lib/unifi/data
    cat system.properties > /dev/null
    echo '# Modifications' | sudo tee -a /usr/lib/unifi/data/system.properties > /dev/null
    echo unifi.xms=256 | sudo tee -a /usr/lib/unifi/data/system.properties
    echo unifi.xmx=1024 | sudo tee -a /usr/lib/unifi/data/system.properties
else
    echo Invalid input!
    echo No modifications was made
    cd /usr/lib/unifi/data
    cat system.properties > /dev/null
    echo '# Modifications' | sudo tee -a /usr/lib/unifi/data/system.properties > /dev/null
    echo unifi.xms=256 | sudo tee -a /usr/lib/unifi/data/system.properties
    echo unifi.xmx=1024 | sudo tee -a /usr/lib/unifi/data/system.properties
fi

# Disabling MongoDB
echo ""
echo 'Step 4: disabling MongoDB'
sudo service mongodb stop
sudo service mongodb disable

# Config autostart of the Unifi controller
echo ""
echo 'Step 5: enable autostart'
sudo systemctl enable unifi
sudo systemctl start unifi

# enable log-rotation
echo ""
echo 'Step 6: enable logrotation'
echo 'Activating optional log-rotation'
echo -n 'Do you want to set up Log-Rotation after 20 days? [Y/n] '
read logrotationdecision

if [[ $logrotationdecision =~ (Y|y) ]]
  then
sudo apt install logrotate -y
sudo bash -c 'cat >> /etc/logrotate.d/unifi << EOF
/var/log/unifi/*.log {
    rotate 20
    daily
    missingok
    notifempty
    compress
    delaycompress
    copytruncate
}
EOF'
elif [[ $logrotationdecision =~ (n) ]]
  then
    echo 'No modifications was made'
else
    echo 'Invalid input!'
fi

# enable additional admin programs
echo 'Step 7: Optional Admin program'
echo 'Installation of optional Raspberry-Config UI: Webmin (recommend)'
echo -n 'Do you want to install Webmin [Y/n] '
read webmindecision

if [[ $webmindecision =~ (Y|y) ]]
  then
echo 'deb https://download.webmin.com/download/repository sarge contrib' | sudo tee /etc/apt/sources.list.d/100-webmin.list
cd ../root
wget http://www.webmin.com/jcameron-key.asc
sudo apt-key add jcameron-key.asc 
sudo apt update
sudo apt install webmin -y
elif [[ $webmindecision =~ (n) ]]
  then
    echo 'No modifications was made'
else
    echo 'Invalid input!'
fi

# enable additional programs
echo 'Step 8: Optional program'
echo 'Installation of optional program: fail2ban'
echo -n 'Do you want to install fail2ban [Y/n] '
read fail2bandecision

if [[ $fail2bandecision =~ (Y|y) ]]
  then
sudo apt install fail2ban -y
elif [[ $fail2bandecision =~ (n) ]]
  then
    echo 'No modifications was made'
else
    echo 'Invalid input!'
fi

echo 'Step 9: Optional service'
echo 'Installation of optional service: UPnP'
echo -n 'Do you want to enable UPnP [Y/n] '
read upnpdecision

if [[ $upnpdecision =~ (Y|y) ]]
  then
sudo apt install miniupnpc -y

#MiniUPNP Settings
echo "sudo upnpc -r 3478 udp" | sudo tee -a /home/miniupnp.sh
echo "sudo upnpc -r 6789 tcp" | sudo tee -a /home/miniupnp.sh
echo "sudo upnpc -r 8080 tcp" | sudo tee -a /home/miniupnp.sh
echo "sudo upnpc -r 8443 tcp" | sudo tee -a /home/miniupnp.sh
echo "sudo upnpc -r 8880 tcp" | sudo tee -a /home/miniupnp.sh
echo "sudo upnpc -r 8843 tcp" | sudo tee -a /home/miniupnp.sh
sudo bash /home/miniupnp.sh

elif [[ $upnpdecision =~ (n) ]]
  then
    echo 'No modifications was made'
else
    echo 'Invalid input!'
fi

echo 'Your Ubiquiti UniFi Controller has been installed & modified to your preference (if any)!'
echo 'Share this with others if this script has helped you!'
echo 'https://raw.githubusercontent.com/steigerbalett/ubiquitiunificontroller/master/rpi-install.sh'
echo ''
echo ''
echo -e "\033[1;31mAccess the Raspi-Ubiquiti-Controller at: https://`hostname -I`:8443\033[0m"
echo ''
echo -e "\033[1;31mAccess the Raspi-Config-UI Webmin at: https://`hostname -I`:10000\033[0m"
echo -e "\033[1;31mwith user: pi and your password (raspberry)\033[0m"
echo ''
# reboot the raspi
echo 'Should the the RaspberryPi now reboot directly or do you do this manually later?'
echo -n 'Do you want to reboot now [Y/n] '
read rebootdecision

if [[ $rebootdecision =~ (Y|y) ]]
  then
echo ''
echo 'System will reboot in 3 seconds'
sleep 3
sudo shutdown -r now
elif [[ $rebootdecision =~ (n) ]]
  then
    echo 'Please reboot to activate the changes'
else
    echo 'Invalid input!'
fi
echo 'Reboot the RaspberryPi now with: sudo reboot now'
exit