#!/usr/bin/env bash

# Check if desktop environment is installed
if ! dpkg -s ${DESKTOP_ENVIRONMENT} &> /dev/null; then
  sudo apt-get update
  DEBIAN_FRONTEND=noninteractive sudo apt-get install -y ${DESKTOP_ENVIRONMENT}
else
  echo "${DESKTOP_ENVIRONMENT} is already installed."
fi

# Check if vncserver is installed
if ! dpkg -s kasmvncserver &> /dev/null; then
  cd /tmp
  DISTRO=$(lsb_release -c -s)
  ARCH=$(dpkg --print-architecture)
  wget -q https://github.com/kasmtech/KasmVNC/releases/download/v${VERSION}/kasmvncserver_$${DISTRO}_${VERSION}_$${ARCH}.deb
  sudo apt-get install -y ./kasvncserver_*.deb
  printf "🥳 KasmVNC v${VERSION} has been successfully installed!\n\n"
  rm ./kasvncserver_*.deb
else
  echo "KasmVNC is already installed."
fi

sudo addgroup $USER ssl-cert

# Coder port-forwarding from dashboard only supports HTTP
sudo bash -c 'cat > /etc/kasmvnc/kasmvnc.yaml <<EOF
network:
  protocol: http
  websocekt_port: ${PORT}
  ssl:
    require_ssl: false
  udp:
    public_ip: 127.0.0.1
EOF'

# This password is not used since we start the server without auth.
# The server is protected via the Coder session token / tunnel
# and does not listen publicly on the VM
echo -e "password\npassword\n" | vncpasswd -wo -u $USER

# Start the server :)
sudo su -u $USER bash -c 'vncserver -select-de "${DESKTOP_ENVIRONMENT}" -disableBasicAuth'