#!/bin/sh
set -e

PACKAGE=fail2ban-p2p
SERVER_USER=${SERVER_USER:-fail2ban-p2p}
SERVER_GROUP=${SERVER_GROUP:-fail2ban-p2p}
SERVER_HOME=${SERVER_HOME:-/var/lib/fail2ban-p2p}
LOGFILE=/var/log/fail2ban-p2p.log

case "$1" in
    install|upgrade)
        if ! getent group "$SERVER_GROUP" >/dev/null; then
            addgroup --quiet --system "$SERVER_GROUP" || true
        fi

        if ! getent passwd "$SERVER_USER" >/dev/null; then
            adduser --quiet \
                --system \
                --ingroup "$SERVER_GROUP" \
                --home "$SERVER_HOME" \
                --no-create-home \
                --disabled-password \
                --gecos "Fail2ban P2P service user" \
                "$SERVER_USER" || true
        fi

        install -d -o "$SERVER_USER" -g "$SERVER_GROUP" -m 0750 "$SERVER_HOME"
        install -d -o root -g "$SERVER_GROUP" -m 0750 /etc/fail2ban-p2p
        install -d -o root -g adm -m 0755 /var/log
        touch "$LOGFILE"
        chown "$SERVER_USER":adm "$LOGFILE"
        chmod 0640 "$LOGFILE"
        ;;
    abort-upgrade)
        ;;
    *)
        echo "preinst called with unknown argument '$1'" >&2
        exit 1
        ;;
esac

#DEBHELPER#

exit 0