#!/bin/sh
echo Lightsail: Initializing Instance.
cat > /etc/ssh/lightsail_instance_ca.pub << EOF
ssh-rsa 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
EOF
echo Lightsail: SSH CA PubKey created.
echo >> /etc/ssh/sshd_config
echo 'TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub' >> /etc/ssh/sshd_config
echo Lightsail: SSH CA PubKey regstrd.

service ssh restart
echo Lightsail: ssh restarted.
readonly pw_pathname=/home/bitnami/bitnami_application_password
touch $pw_pathname
chmod 600 $pw_pathname
chown bitnami.bitnami $pw_pathname

if [ -f /var/log/boot.log ]; then
   cmd='cat $(ls -d1tr /var/log/boot.log*)'
elif [ -f /var/log/syslog ]; then
   cmd='cat $(ls -d1tr /var/log/syslog*)'
else
   cmd='/usr/bin/journalctl -u bitnami --since -2h'
fi
sleep_time=3
total_time=0
if [ ! -s $pw_pathname ]; then
  until [ $total_time -ge "600" ]; do
  password=$( eval "$cmd" | grep -a "Bitnami application password" | tail -n1 | grep -oE "'(.*?)'" | tr -d "'" )
  if [ -n "$password" ]; then
    echo $password >> $pw_pathname
    echo Lightsail: Bitnami app password stored in $pw_pathname
    break
  fi
  echo no password found, will retry in $sleep_time seconds
  total_time=$(( total_time + sleep_time ))
  sleep $sleep_time
  done
fi