#!/bin/bash

###
# https://github.com/sefinek/UFW-AbuseIPDB-Reporter
##

VERSION="1.0.3"
DATE="31.10.2024"
REPO="https://github.com/sefinek/UFW-AbuseIPDB-Reporter"

cat << "EOF"
     _      _                            ___   ____    ____    ____
    / \    | |__    _   _   ___    ___  |_ _| |  _ \  |  _ \  | __ )
   / _ \   | '_ \  | | | | / __|  / _ \  | |  | |_) | | | | | |  _ \
  / ___ \  | |_) | | |_| | \__ \ |  __/  | |  |  __/  | |_| | | |_) |
 /_/   \_\_|_.__/ _ \__,_| |___/  \___| |___| |_|     |____/  |____/

         (_)_ __ | |_ ___  __ _ _ __ __ _| |_(_) ___  _ __
         | | '_ \| __/ _ \/ _` | '__/ _` | __| |/ _ \| '_ \
         | | | | | ||  __/ (_| | | | (_| | |_| | (_) | | | |
         |_|_| |_|\__\___|\__, |_|  \__,_|\__|_|\___/|_| |_|
                          |___/

EOF

cat <<EOF
     >> Made by sefinek.net || Version: $VERSION [$DATE] <<

This installer configures the UFW-AbuseIPDB-Reporter, a tool that analyzes UFW firewall logs
and reports malicious IP addresses to the AbuseIPDB database.

=======================================================================================================

EOF


# Function to download a file using either wget or curl
download_file() {
    local url="$1"
    local output="$2"
    local user_agent="UFW-AbuseIPDB-Reporter/$VERSION (+$REPO)"

    if command -v wget >/dev/null 2>&1; then
        echo "INFO: Using wget to download the file. Please wait..."
        wget --header="User-Agent: $user_agent" -O "$output" "$url"
    elif command -v curl >/dev/null 2>&1; then
        echo "INFO: wget not found. Switching to curl to download the file. Please wait..."
        curl -A "$user_agent" -o "$output" "$url"
    else
        echo "ERROR: Neither wget nor curl is installed! Please install one of these tools and try running the script again."
        exit 1
    fi
}

# Function to remove the existing service
remove_service() {
    echo "INFO: Stopping and disabling the abuseipdb-ufw.service..."
    sudo systemctl stop abuseipdb-ufw.service
    sudo systemctl disable abuseipdb-ufw.service
    sudo rm /etc/systemd/system/abuseipdb-ufw.service
    sudo systemctl daemon-reload
    # sudo systemctl reset-failed
    echo
}

# Function to validate the API token format
validate_token() {
    local token="$1"
    if [[ ! "$token" =~ ^[a-f0-9]{80}$ ]]; then
        return 1
    else
        return 0
    fi
}

# Set the installation directory
install_dir="/usr/local/bin/UFW-AbuseIPDB-Reporter"
script_path="$install_dir/reporter.sh"

# Get the username of the user who invoked sudo (if any)
invoking_user=$(logname)

# Check if the service already exists
if systemctl list-unit-files | grep -q '^abuseipdb-ufw.service'; then
    echo "WARNING: abuseipdb-ufw.service is already installed! If you plan to update or reinstall, choose 'Yes'."
    read -rp "> Do you want to remove the existing service? [Yes/no]: " remove_existing

    remove_existing=$(echo "$remove_existing" | tr '[:upper:]' '[:lower:]')
    if [[ "$remove_existing" =~ ^(yes|y)$ ]]; then
        remove_service
    else
        echo -e "INFO: Existing service will not be removed\n"
    fi
fi

# Create the installation directory
echo "INFO: Creating installation directory at $install_dir..."
if ! sudo mkdir -p "$install_dir"; then
    echo "ERROR: Failed to create installation directory. Please check your permissions!"
    exit 1
fi
echo "INFO: Installation directory created successfully"

# Download the reporter.sh script
GITHUB_URL="https://raw.githubusercontent.com/sefinek/UFW-AbuseIPDB-Reporter/main/reporter.sh"
echo "INFO: Downloading reporter.sh from $GITHUB_URL"
if ! download_file "$GITHUB_URL" "$script_path"; then
    echo "ERROR: Failed to download reporter.sh from GitHub! Please check your permissions!"
    exit 1
fi
echo "INFO: Successfully downloaded reporter.sh to $script_path"

# Make the reporter.sh script executable
if ! sudo chmod +x "$script_path"; then
    echo "ERROR: Failed to make reporter.sh executable."
    exit 1
fi
echo -e "INFO: reporter.sh has been made executable\n"

# Prompt for API token with up to 3 attempts
max_attempts=3
attempts=0
valid_token=false

while [[ $attempts -lt $max_attempts ]]; do
    read -rsp "> Please enter your AbuseIPDB API token: " api_key
    echo

    if validate_token "$api_key"; then
        valid_token=true
        break
    else
        attempts_left=$((max_attempts - attempts - 1))
        echo "ERROR: Invalid API token format. Please enter an 80-character hexadecimal string. You have $attempts_left attempts left."
        ((attempts++))
    fi
done

if [[ "$valid_token" = false ]]; then
    echo "ERROR: Maximum number of attempts reached. Installation aborted!"
    exit 1
fi

# Encode the API token
token_file="$install_dir/.abuseipdb_token"
echo "INFO: Encoding data (file $token_file)..."
if ! echo -n "$api_key" | openssl enc -base64 | sudo tee "$token_file" >/dev/null; then
    echo "ERROR: Something went wrong. Failed to encode API token."
    exit 1
fi

# Update the ENCODED_API_KEY_FILE variable in reporter.sh by replacing the existing definition
echo "INFO: Updating ENCODED_API_KEY_FILE variable in reporter.sh..."
if ! sudo sed -i "s|^ENCODED_API_KEY_FILE=.*|ENCODED_API_KEY_FILE=\"$token_file\"|" "$script_path"; then
    echo "ERROR: Failed to update ENCODED_API_KEY_FILE in reporter.sh."
    exit 1
fi

echo "INFO: Setting permissions (chmod 644) for the file /var/log/ufw.log"
sudo chmod 644 /var/log/ufw.log


# Prompt to add reporter.sh as a service
echo
read -rp "> Do you want to add reporter.sh as a service? [Yes/no]: " add_service

# Normalize input to lowercase to handle variations in input (yes, y, no, n)
add_service=$(echo "$add_service" | tr '[:upper:]' '[:lower:]')

if [[ "$add_service" =~ ^(yes|y)$ ]]; then
    service_file="/etc/systemd/system/abuseipdb-ufw.service"
    echo "INFO: Setting up reporter.sh as a service"
if ! sudo bash -c "cat > $service_file" <<-EOF
[Unit]
Description=UFW AbuseIPDB Reporter
After=network.target
Documentation=$REPO

[Service]
Environment="PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
ExecStart=$script_path
Restart=always
User=$invoking_user
WorkingDirectory=$install_dir
StandardOutput=journal+console
StandardError=journal+console

[Install]
WantedBy=multi-user.target
EOF
    then
        echo "ERROR: Failed to create service file. Please check your permissions!"
        exit 1
    fi

    sudo systemctl daemon-reload

    if sudo systemctl enable abuseipdb-ufw.service && sudo systemctl start abuseipdb-ufw.service; then
        echo "INFO: Attempting to start the abuseipdb-ufw.service..."
    else
        echo "ERROR: Failed to enable or start the abuseipdb-ufw.service. Please check the system logs for details."
        exit 1
    fi

    # Add a 5-second delay before checking the service status
    echo "INFO: Sleeping for 5 seconds..."
    sleep 5

    # Check if the service started successfully
    if sudo systemctl is-active --quiet abuseipdb-ufw.service; then
        echo "SUCCESS: abuseipdb-ufw.service is running!"
        sudo systemctl status abuseipdb-ufw.service --no-pager
    else
        echo "ERROR: abuseipdb-ufw.service failed to start."
        sudo systemctl status abuseipdb-ufw.service --no-pager
        exit 1
    fi
elif [[ "$add_service" =~ ^(no|n)$ ]]; then
    echo "INFO: reporter.sh will not be added as a service..."
    echo "INFO: Running reporter.sh directly. Press ^C to stop the script."
    if "$script_path"; then
        echo "INFO: reporter.sh executed successfully!"
    else
        echo "ERROR: Failed to execute reporter.sh."
        exit 1
    fi
else
    echo "ERROR: Invalid input. Please enter Yes, No, y, or n."
    exit 1
fi


# Prompt to add the service to autostart
echo
read -rp "> Do you want to add abuseipdb-ufw.service to autostart? [Yes/no]: " add_autostart

add_autostart=$(echo "$add_autostart" | tr '[:upper:]' '[:lower:]')

if [[ "$add_autostart" =~ ^(yes|y)$ ]]; then
    if sudo systemctl enable abuseipdb-ufw.service; then
        echo "INFO: Great! abuseipdb-ufw.service has been added to autostart. Installation finished!"
        echo "INFO: Run 'journalctl -u abuseipdb-ufw.service -f' to view more logs."
    else
        echo "ERROR: Failed to add abuseipdb-ufw.service to autostart!"
        exit 1
    fi
elif [[ "$add_autostart" =~ ^(no|n)$ ]]; then
    echo "INFO: abuseipdb-ufw.service will not be added to autostart. Installation finished!"
else
    echo "ERROR: Invalid input. Please enter Yes, No, y, or n."
    exit 1
fi