; Copyright (c) uib gmbh (www.uib.de)
; This sourcecode is owned by uib
; and published under the Terms of the General Public License.
; credits: http://www.opsi.org/credits/

[Actions]
requiredWinstVersion >= "4.10.8.6"

DefVar $wget$
DefVar $wget_uninst$
DefVar $OvpnConfigDir$
DefVar $ConfigURL$
DefVar $defPW$
DefVar $pw$
DefVar $local_ip_addr2$
DefVar $local_netmask2$
DefVar $MsiId$
DefVar $UninstallProgram$
DefVar $LogDir$
DefVar $ProductId$  
DefVar $MinimumSpace$
DefVar $InstallDir$
DefVar $ExitCode$
DefVar $LicenseRequired$
DefVar $LicenseKey$
DefVar $LicensePool$

Set $LogDir$ = "%SystemDrive%\tmp"
Set $wget$ = "%SystemDrive%\Programme\GnuWin32\bin\wget.exe"
;Set $wget_uninst$ = GetRegistrystringvalue("[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wget-1.11.4-1_is1] UninstallString")
;Set $wget_uninst$ = unquote($wget_uninst$,$wget_uninst$)

Set $OvpnConfigDir$ = "%SystemDrive%\Programme\OpenVPN\config"
;Set $ConfigURL$ = GetIni ("%ScriptPath%\custom\openvpn.ini" [Webserver] URL)
Set $ConfigURL$ = GetProductProperty ("base-url","http://default-url.de/opsi/openvpn")
Set $pw$ = GetProductProperty ("htaccess-password","SecRet")
Set $local_ip_addr2$ = GetProductProperty("local-addr2.ip","values")
    if not ($local_ip_addr2$ = "")
       Set $local_netmask2$ = GetProductProperty("local-addr2.netmask","values")
    endif
           
; The token BUILDER_VARIABLES will be replaced by opsi-builder.sh
; and adds the following variables:
;   from builder-product.cfg :  all variables definded by attribute WINST[index]
;   from builder-product.cfg :  VENDOR PN VERSION RELEASE PRIORITY ADVICE TYPE   
;   from opsi-builder.cfg    :  CREATOR_TAG CREATOR_NAME CREATOR_EMAIL           
;   auto generated winst-variables
;         $IconFile$: path to product picture
;
@@BUILDER_VARIABLES@@

; ----------------------------------------------------------------
; - Please edit the following values                             -
; ----------------------------------------------------------------
;$ProductId$ should be the name of the product in opsi
; therefore please: only lower letters, no umlauts, 
; no white space use '-' as a seperator
Set $ProductId$       = "openvpn-config"
Set $MinimumSpace$    = "1 MB"
; the path were we find the product after the installation
Set $InstallDir$      = "%ProgramFiles32Dir%\<path to the product>"
Set $LicenseRequired$ = "false"
Set $LicensePool$     = "p_" + $ProductId$
; ----------------------------------------------------------------

if not(HasMinimumSpace ("%SystemDrive%", $MinimumSpace$))
	LogError "Not enough space on %SystemDrive%, " + $MinimumSpace$ + " on drive %SystemDrive% needed for " + $ProductId$
	isFatalError
	; Stop process and set installation status to failed
else
	comment "Show product picture"
	ShowBitmap "%ScriptPath%\" + $ProductId$ + ".png" $ProductId$
	
	if FileExists("%ScriptPath%\delsub32.ins")
		comment "Start uninstall sub section"
		Sub "%ScriptPath%\delsub32.ins"
	endif
	
	Message "Installing " + $ProductId$ + " ..."
	
	if $LicenseRequired$ = "true"
		comment "Licensing required, reserve license and get license key"
		Sub_get_licensekey
	endif
	
        comment "Copy files"
        Files_install /32Bit

	comment "Start setup program"
	Winbatch_install
	Sub_check_exitcode
	
        comment "Patch Registry"
        Registry_install /32Bit

        comment "Default-User in Registry"
        Registry_AllUsers /AllNTUserdats
        
        comment "Reboot"
        ExitWindows /Reboot
        
	comment "Test for installation success"
	; Test if software marked as installed in registry
	; if (GetRegistryStringValue32("[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}] DisplayName") = "")
	; 	logError "Fatal: After Installation 32 bit [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}] not found"
	; 	isFatalError
	; else
	; 	comment "Successful Installation"
	; endif

endif

[Files_install]
copy "%ScriptPath%\reghack.vbs" %SystemDrive%\tmp\
copy "%ScriptPath%\reghack2.vbs" %SystemDrive%\tmp\
copy "%ScriptPath%\reg_ndiwswan_bind.vbs" %SystemDrive%\tmp\
copy "%ScriptPath%\enable_rdp.vbs" %SystemDrive%\tmp\
copy "%ScriptPath%\set_2nd_ip.vbs" %SystemDrive%\tmp\

[Winbatch_install]
; Choose one of the following examples as basis for your installation
; You can use $LicenseKey$ var to pass a license key to the installer
;
; === Nullsoft Scriptable Install System ================================================================
"$Wget32Exe$" /Silent
;Set $wget_uninst$ = GetRegistrystringvalue("[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wget-1.11.4-1_is1] UninstallString")
;Set $wget_uninst$ = unquote($wget_uninst$,$wget_uninst$)


"%SystemDrive%\tmp\reghack.vbs"
"%SystemDrive%\tmp\reghack2.vbs"
"%SystemDrive%\tmp\reg_ndiwswan_bind.vbs"
"%SystemDrive%\tmp\enable_rdp.vbs"

;"%ScriptPath%\reghack.vbs"
;"%ScriptPath%\reghack2.vbs"
;"%ScriptPath%\reg_ndiwswan_bind.vbs"
;"%Scriptpath%\enable_rdp.vbs"

$wget$ -P $OvpnConfigDir$ --http-user=%PCName% --password=$pw$ -r -R "index.html*" -nd -nH -np $ConfigURL$/%PCName%

cacls $OvpnConfigDir$ /E /R Benutzer
cacls $OvpnConfigDir$ /E /R Hauptbenutzer

sc config OpenVPNService start= auto
netsh firewall set opmode mode=disable interface="LAN-Verbindung OpenVPN"
netsh firewall set service type=remotedesktop mode=enable scope=all

%ScriptPath%\set_2nd_ip.vbs $local_ip_addr2$ $local_netmask2$

;$wget_uninst$ /silent

[Registry_install]
openkey [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]
set "fDenyTSConnections" = REG_DWORD:0000

openkey [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
set "MaxPacketSize"=reg_dword:01

openkey [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
set "GpNetworkStartTimeoutPolicyValue"=reg_dword:60
set "GroupPolicyMinTransferRate"=reg_dword:00

openkey [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
set "GpNetworkStartTimeoutPolicyValue"=reg_dword:60
set "GroupPolicyMinTransferRate"=reg_dword:00

[Registry_AllUsers]
openkey [SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
set "GpNetworkStartTimeoutPolicyValue"=reg_dword:60
set "GroupPolicyMinTransferRate"=reg_dword:00