#!/bin/sh -eu
tool=$(readlink -e "${0%/*}/..")
. "$tool"/local/lib.sh

"$tool"/local/apt-get-install duplicity
home="/home/backup"
"$tool"/local/adduser backup \
 --disabled-password \
 --group \
 --home "$home" \
 --shell /bin/bash \
 --system
sudo usermod --home "$home" backup
sudo install -d -m 750 -o backup -g backup \
 "$home" \
 "$home"/etc \
 "$home"/etc/gpg \
 "$home"/etc/ssh
sudo install -d -m 770 -o backup -g backup \
 "$home"/archive \
 "$home"/bin \
 "$home"/data \
 "$home"/snapshot
getent group sudo backup |
while IFS=: read -r group x x users
 do while test -n "$users" && IFS=, read -r user users <<-EOF
		$users
		EOF
	 do eval home="~$user"
		sudo cat "$home"/etc/ssh/authorized_keys
	 done
 done |
sudo install -m 640 -o backup -g backup /dev/stdin \
 "$home"/etc/ssh/authorized_keys
sudo ln -fns etc/gpg "$home"/.gnupg