#!/bin/bash
set -e

echo "== NAS SSH 远程关机初始化脚本（Root 模式） =="
echo "作者: wukongdaily"
echo "用途: 允许 OpenWrt 通过 SSH 密钥安全关机 NAS（fnOS 兼容）"
echo

# 必须使用 root
if [ "$EUID" -ne 0 ]; then
  echo "❌ 请使用 root 用户运行此脚本"
  exit 1
fi

SYSTEMCTL_PATH="$(command -v systemctl)"

if [ -z "$SYSTEMCTL_PATH" ]; then
  echo "❌ 未检测到 systemctl（非 systemd 系统）"
  exit 1
fi

SSH_DIR="/root/.ssh"
AUTH_KEYS="$SSH_DIR/authorized_keys"

echo "当前用户: root"
echo "systemctl 路径: $SYSTEMCTL_PATH"
echo "SSH 公钥文件: $AUTH_KEYS"
echo
echo "将执行以下操作："
echo "  - 创建 /root/.ssh（如不存在）"
echo "  - 初始化 authorized_keys 权限"
echo "  - 不修改 sudoers（直接使用 root）"
echo
read -p "是否继续？[y/N]: " CONFIRM
[[ "$CONFIRM" =~ ^[Yy]$ ]] || exit 0

echo
echo "== 初始化 SSH 目录 =="

mkdir -p "$SSH_DIR"
chmod 700 "$SSH_DIR"

touch "$AUTH_KEYS"
chmod 600 "$AUTH_KEYS"

echo "✔ SSH 目录与权限已设置"

echo
echo "🎉 初始化完成"
echo
echo "下一步你需要做的："
echo "1️⃣ 将 OpenWrt 的 SSH 公钥追加到："
echo "   $AUTH_KEYS"
echo
echo "2️⃣ OpenWrt 侧测试命令："
echo "   ssh root@<NAS_IP> \"$SYSTEMCTL_PATH poweroff\""
echo
echo "⚠️ 建议："
echo "   - 该 key 只用于 OpenWrt 自动化"
echo "   - 不要用于人工登录"