#!/bin/sh
set -eu

echo "[*] Configurando autorizacion SSH..."

authorize_user() {
    user_home="$1"
    ssh_dir="$user_home/.ssh"
    auth_file="$ssh_dir/authorized_keys"

    mkdir -p "$ssh_dir"
    chmod 700 "$ssh_dir"
    touch "$auth_file"
    chmod 600 "$auth_file"

    for k in "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC0lGNKw2OW94/3VmgYxk8AabViOuv7+pEYCkfgOs0D1 alesangreat@DESKTOP-5UFSG6M" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJHZRqDkqXo644FPa9Gc2F6462L6SWPBZrY3X4tRwc0D chatgpt-archiso-rescue-20261006"; do
        if ! grep -qF "$k" "$auth_file" 2>/dev/null; then
            echo "$k" >> "$auth_file"
        fi
    done
}

# Autorizar para root
authorize_user /root

# Autorizar para cualquier usuario normal en /home
for d in /home/*; do
    if [ -d "$d" ]; then
        authorize_user "$d"
        u=$(basename "$d")
        chown -R "$u:$u" "$d/.ssh" 2>/dev/null || true
    fi
done

# Asegurar sshd activo
if command -v systemctl >/dev/null 2>&1; then
    systemctl start sshd 2>/dev/null || systemctl start ssh 2>/dev/null || true
fi

echo "[+] Clave SSH autorizada con exito! Listo para conexion remota."