#!/usr/bin/env bash
# Instala OpenSSH + Tailscale num Debian e autoriza a chave do Mac do dono.
# Uso: curl -fsSLO https://tools.fuzzalab.pt/downloads/setup-tailscale-ssh.run && bash setup-tailscale-ssh.run [nome-da-maquina]
set -euo pipefail

NOME="${1:-pc-velho}"
CHAVE='ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPNrutnD5jkyMQQv7BHlcbPTuUIeX8y3tya0Ws9wYArB slackie@macbook-hermes'

[ "$(id -u)" -eq 0 ] && { echo "Corre como utilizador normal (usa sudo internamente)."; exit 1; }

echo ">> 1/4 Pacotes (openssh-server, curl)"
sudo apt-get update
sudo apt-get install -y openssh-server curl
sudo systemctl enable --now ssh

echo ">> 2/4 Chave SSH autorizada"
mkdir -p ~/.ssh && chmod 700 ~/.ssh
touch ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys
grep -qxF "$CHAVE" ~/.ssh/authorized_keys || echo "$CHAVE" >> ~/.ssh/authorized_keys

echo ">> 3/4 Tailscale"
command -v tailscale >/dev/null || curl -fsSL https://tailscale.com/install.sh | sh

echo ">> 4/4 A ligar à tailnet como '$NOME' (abre o URL que aparecer e aprova)"
sudo tailscale up --hostname="$NOME"

echo
echo "=== Resultado (envia isto ao Claude) ==="
echo "utilizador: $(whoami)"
echo "hostname:   $(hostname)"
echo "tailnet IP: $(tailscale ip -4 | head -1)"