#!/bin/sh
echo Lightsail: Initializing Instance.
cat > /etc/ssh/lightsail_instance_ca.pub << EOF
ssh-rsa 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
EOF
echo Lightsail: SSH CA PubKey created.
echo >> /etc/ssh/sshd_config
echo 'TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub' >> /etc/ssh/sshd_config
echo Lightsail: SSH CA PubKey regstrd.

service ssh restart
echo Lightsail: ssh restarted.
readonly pw_pathname=/home/bitnami/bitnami_application_password
touch $pw_pathname
chmod 600 $pw_pathname
chown bitnami.bitnami $pw_pathname

if [ -f /var/log/boot.log ]; then
   cmd='cat $(ls -d1tr /var/log/boot.log*)'
elif [ -f /var/log/syslog ]; then
   cmd='cat $(ls -d1tr /var/log/syslog*)'
else
   cmd='/usr/bin/journalctl -u bitnami --since -2h'
fi
sleep_time=3
total_time=0
if [ ! -s $pw_pathname ]; then
  until [ $total_time -ge "600" ]; do
  password=$( eval "$cmd" | grep -a "Bitnami application password" | tail -n1 | grep -oE "'(.*?)'" | tr -d "'" )
  if [ -n "$password" ]; then
    echo $password >> $pw_pathname
    echo Lightsail: Bitnami app password stored in $pw_pathname
    break
  fi
  echo no password found, will retry in $sleep_time seconds
  total_time=$(( total_time + sleep_time ))
  sleep $sleep_time
  done
fi