#!/bin/sh

LOG_FILE=/var/log/cryptobox/cryptobox.log
WEBLOG_FILE=/var/log/cryptobox/webserver.log
PID_DIR=/var/run/cryptobox
CRYPTOBOX_USER=cryptobox
USER_HOME=/var/cache/cryptobox
SUPER_FILE=/etc/super.tab
ADDITIONAL_GROUP=disk

# check the current cryptobox user - maybe it was changed
if test -r /etc/default/cryptobox
  then	runas_user=$(grep "^RUNAS=" /etc/default/cryptobox | cut -d "=" -f 2)
		test -n "$runas_user" && CRYPTOBOX_USER=$runas_user
 fi


create_user_home()
{
	# if the user already exists -> do nothing
	getent passwd "$CRYPTOBOX_USER" 2>/dev/null >/dev/null && return 0
	# create cryptobox user
	echo "Creating new user '$CRYPTOBOX_USER' ..."
	adduser --system --group --home "$USER_HOME" "$CRYPTOBOX_USER"
	adduser "$CRYPTOBOX_USER" "$ADDITIONAL_GROUP"
	mkdir -p "$USER_HOME/mnt"
	mkdir -p "$USER_HOME/settings"
	chown -R ${CRYPTOBOX_USER}: "$USER_HOME"
	# only members of the cryptobox group may access the user directory
	chmod 750 "$USER_HOME"
}

create_add_super_permission()
{
	## this will add some lines to the configuration file of 'super'
	## do nothing, if there is already a CryptoBox line
	grep -q "CRYPTOBOX_MARKER" "$SUPER_FILE" && return 0
	echo >>"$SUPER_FILE" "## CRYPTOBOX_MARKER - please do not remove!"
	echo >>"$SUPER_FILE" "CryptoBoxRootActions	/usr/sbin/CryptoBoxRootActions	$CRYPTOBOX_USER"
}

create_dirs_and_files()
{
	# pid file
	test ! -e "$PID_DIR" && mkdir -p "$PID_DIR"
	chown "$CRYPTOBOX_USER" "$PID_DIR"
	# create config directories with appropriate permissions
	test ! -e "$LOG_FILE" && mkdir -p "$(dirname $LOG_FILE)" && touch "$LOG_FILE"
	chown "$CRYPTOBOX_USER" "$LOG_FILE"
	test ! -e "$WEBLOG_FILE" && mkdir -p "$(dirname $WEBLOG_FILE)" && touch "$WEBLOG_FILE"
	chown "$CRYPTOBOX_USER" "$WEBLOG_FILE"
}


#################### main ######################

case "$1" in
	configure)
		create_user_home
		create_dirs_and_files
		create_add_super_permission
		# continue at the end
		;;
	abort-upgrade|abort-remove|abort-deconfigure)
		# nothing to be done
		exit 0
		;;
	*)
		echo "postinst called with unknown argument \`$1'" >&2
		exit 0
		;;
  esac


#DEBHELPER#

exit 0