#!/bin/bash

echo "🚀 Update system..."
apt update -y && apt upgrade -y

echo "🧰 Install XFCE desktop..."
apt install xfce4 xfce4-goodies -y

echo "🖥 Install TigerVNC..."
apt install tigervnc-standalone-server tigervnc-common -y

echo "🔌 Install DBUS (fix Ubuntu 24)..."
apt install dbus-x11 -y

echo "⚙️ Setup VNC config..."
mkdir -p ~/.vnc

cat > ~/.vnc/xstartup << 'EOF'
#!/bin/bash
unset SESSION_MANAGER
unset DBUS_SESSION_BUS_ADDRESS
exec dbus-launch --exit-with-session startxfce4
EOF

chmod +x ~/.vnc/xstartup

echo "🔐 Set password VNC..."
vncserver << EOF
Yodaime1#
Yodaime1#
n
EOF

echo "🛑 Restart VNC..."
vncserver -kill :1
vncserver :1 -localhost no

echo "🔥 Open firewall..."
ufw allow 5901/tcp || true

echo "⚙️ Setup VNC auto-start (systemd)..."
cat > /etc/systemd/system/vncserver.service << 'EOF'
[Unit]
Description=TigerVNC Server
After=network.target

[Service]
Type=forking
User=root
ExecStartPre=-/usr/bin/vncserver -kill :1 > /dev/null 2>&1
ExecStartPre=-/bin/rm -f /tmp/.X1-lock /tmp/.X11-unix/X1
ExecStart=/usr/bin/vncserver :1 -localhost no
ExecStop=/usr/bin/vncserver -kill :1
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable vncserver.service
vncserver -kill :1 2>/dev/null || true
rm -f /tmp/.X1-lock /tmp/.X11-unix/X1 2>/dev/null || true
systemctl start vncserver.service

echo "🐍 Install Python & dependencies..."
apt-get install -y python3-tk python3-pip \
    libx11-xcb1 libxcomposite1 libxcursor1 libxdamage1 libxfixes3 \
    libxi6 libxrandr2 libxrender1 libxss1 libxtst6 libglib2.0-0 \
    libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 \
    libgbm1 libasound2t64 unzip xdotool

echo "📦 Install pip packages..."
pip3 install --break-system-packages psutil playwright playwright-stealth

echo "🌐 Install Playwright Chromium..."
python3 -m playwright install chromium
python3 -m playwright install-deps chromium

echo "⏰ Setup cronjob sendaccount..."
(crontab -l 2>/dev/null; echo "3 3 * * * /root/Downloads/sendaccount.sh >> /root/Downloads/sendaccount.log 2>&1") | crontab -

echo "📥 Download ARM package..."
sleep 5
mkdir -p /root/Downloads
wget -O /root/Downloads/SAGE.zip https://acemarket.shop/arm/v328.zip
test -s /root/Downloads/SAGE.zip || { echo '❌ Download gagal! URL: https://acemarket.shop/arm/v328.zip'; exit 1; }
unzip -o -P 'Yodaime1#' /root/Downloads/SAGE.zip -d /root/Downloads/
sleep 5
rm /root/Downloads/SAGE.zip
VPS_IP=$(curl -s -4 ifconfig.me 2>/dev/null || hostname -I | awk '{print $1}')

echo ""
echo "✅ DONE!"
echo "👉 Connect ke: ${VPS_IP}:5901"
echo "👉 Password: Yodaime1#"
echo ""
echo "⚠️ Silahkan reboot dan ganti password setelah login. Edit juga crontab nya jika tidak sesuai"