#!/bin/bash
# ^SOURCED, actually running in ash

. /opt/openslx/config

# creates managed policy file, those settings cannot be changed by the user
# (if he even gets to the settings dialog in the first place)
create_chromium_policies() {
	local bookmarkbar url
	if [ -n "$SLX_BROWSER_BOOKMARKS" ]; then
		bookmarkbar=true
	else
		bookmarkbar=false
	fi

	url=$( printf "%s" "$SLX_BROWSER_URL" | jq -R . )
	mkdir -p "/etc/chromium-browser/policies/managed" "/etc/chromium/policies/managed"
	cat <<- EOF > "/etc/chromium-browser/policies/managed/kiosk-mode.json"
	{
		"AutoFillEnabled": false,
		"BackgroundModeEnabled": false,
		"BookmarkBarEnabled": $bookmarkbar,
		"DefaultBrowserSettingEnabled": true,
		"DeviceAutoUpdateDisabled": true,
		"DownloadRestrictions": 3,
		"HomepageLocation": $url,
		"HomepageIsNewTabPage": false,
		"NewTabPageLocation": "about:blank",
		"PasswordManagerEnabled": false,
		"RestoreOnStartup": 4,
		"RestoreOnStartupURLs": $url,
		"ShowAppsShortcutInBookmarkBar": false,
		"ImportBookmarks": false,
		"TranslateEnabled": false
	}
	EOF
	# Ubuntu uses chromium-browser, Debian chromium (...)
	ln -nfs "/etc/chromium-browser/policies/managed/kiosk-mode.json" \
		"/etc/chromium/policies/managed/kiosk-mode.json"
	# Disable importing bookmarks
	for i in chromium chromium-browser; do
		i="/etc/$i/master_preferences"
		[ -f "$i" ] || continue
		< "$i"  jq 'del(.distribution.import_bookmarks_from_file) | .distribution.import_bookmarks = false' \
			> "$i.new"
		mv -f "$i.new" "$i"
	done
}

if [ "${PAM_SERVICE//autologin/}" != "$PAM_SERVICE" -a "$PAM_TTY" = ":0" ]; then
	create_chromium_policies
fi
true