preinstall:
	# hardcoded users and groups
	$(inroot) useradd --system --comment="created from appliance building - zabbix user" --home-dir="/var/lib/zabbix/home" --shell="/sbin/nologin" --no-create-home --uid 600 --user-group zabbix
	# switch to hardened, build hardened toolchain, rebuild everything
	mkdir -p $(CHROOT)/etc/portage/profile
	echo "-hardened" >> $(CHROOT)/etc/portage/profile/use.mask
	$(inroot) $(EMERGE) $(USEPKG) --oneshot gcc
	$(inroot) $(EMERGE) $(USEPKG) --oneshot binutils virtual/libc
	-$(gcc_config)
	$(inroot) $(EMERGE) $(USEPKG) --emptytree @world
	$(inroot) bash -c 'yes YES | etc-update --automode -9'

	# Unitas-Portage-Overlay einbinden
	$(inroot) $(EMERGE) -n $(USEPKG) app-portage/layman
	sed -i 's/check_official : Yes/check_official : No/' $(CHROOT)/etc/layman/layman.cfg
	wget -P $(CHROOT)/etc/layman/overlays http://dev.unitas-network.de/raw/Gentoo/Unitas.git/master/unitas-overlays.xml
	$(inroot) layman -l | grep -q unitas || $(inroot) layman -La unitas

postinstall: timesyncd.conf firstboot.start
	# Konfigurationen anpassen
	cp timesyncd.conf $(CHROOT)/etc/systemd/timesyncd.conf
	mkdir -p $(CHROOT)/etc/local.d
	cp firstboot.start $(CHROOT)/etc/local.d/firstboot.start
	touch $(CHROOT)/firstboot
	sed -i 's/# %wheel ALL=(ALL) ALL/%wheel ALL=(ALL) ALL/' $(CHROOT)/etc/sudoers
	$(inroot) useradd -m -G users,wheel -s /bin/bash admin
	$(inroot) passwd -d admin; $(inroot) passwd -e admin
	$(inroot) systemctl enable tmux@root.service

	# Beispiel feste IP-Adresse
	cp 00-eth0.network $(CHROOT)/00-eth0.network.example

	# MariaDB-Konfiguration
	cp mariadb/my.cnf $(CHROOT)/etc/mysql/my.cnf
	cp mariadb/my.cnf.root $(CHROOT)/root/.my.cnf
	chmod 0600 $(CHROOT)/root/.my.cnf
	rm -rf $(CHROOT)/var/lib/mysql/*
	$(inroot) bash -c 'yes gentoo | emerge --config dev-db/mariadb'

	# Apache-/PHP-Konfiguration
	sed -i 's:APACHE2_OPTS=\":APACHE2_OPTS=\"-D PHP :' $(CHROOT)/etc/conf.d/apache2
	find $(CHROOT)/etc/php/apache2-*/ -iname php.ini -print | xargs \sed -i \
		-e 's:.*date.timezone =.*:date.timezone = Europe/Berlin:' \
		-e 's:.*max_execution_time =.*:max_execution_time = 300:' \
		-e 's:.*max_input_time =.*:max_input_time = 300:' \
		-e 's:.*post_max_size =.*:post_max_size = 16M:' \
		-e 's:.*always_populate_raw_post_data =.*:always_populate_raw_post_data = -1:'
	$(inroot) systemctl enable apache2

	# Add zabbix service definitions
	echo "zabbix-agent 10050/tcp Zabbix Agent" >> $(CHROOT)/etc/services
	echo "zabbix-agent 10050/udp Zabbix Agent" >> $(CHROOT)/etc/services
	echo "zabbix-trapper 10051/tcp Zabbix Trapper" >> $(CHROOT)/etc/services
	echo "zabbix-trapper 10051/udp Zabbix Trapper" >> $(CHROOT)/etc/services

	# Install Zabbix webapp
	$(inroot) webapp-config -h localhost -d zabbix -I zabbix `ls $(CHROOT)/usr/share/webapps/zabbix`
	cp $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php.example $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php
	# im Zabbix-Ebuild wird fowners und fperms vor webapp_src_install aufgerufen und deswegen wieder überschrieben
	$(inroot) chown zabbix:zabbix \
		/etc/zabbix \
		/var/lib/zabbix \
		/var/lib/zabbix/home \
		/var/lib/zabbix/scripts \
		/var/lib/zabbix/alertscripts \
		/var/lib/zabbix/externalscripts \
		/var/log/zabbix
	chmod 0750 \
		$(CHROOT)/etc/zabbix \
		$(CHROOT)/var/lib/zabbix \
		$(CHROOT)/var/lib/zabbix/home \
		$(CHROOT)/var/lib/zabbix/scripts \
		$(CHROOT)/var/lib/zabbix/alertscripts \
		$(CHROOT)/var/lib/zabbix/externalscripts \
		$(CHROOT)/var/log/zabbix

	# Zabbix Agent
	cp zabbix/userparameter_mysql.conf $(CHROOT)/var/lib/zabbix/userparameter_mysql.conf

	# Zabbix Syslog (https://github.com/v-zhuravlev/zabbix-syslog)
	mkdir -p $(CHROOT)/etc/zabbix/scripts/lib
	cp zabbix/zabbix-syslog/zabbix_syslog_create_urls.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl
	cp zabbix/zabbix-syslog/zabbix_syslog_lkp_host.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl
	cp zabbix/zabbix-syslog/zabbix_syslog.cfg $(CHROOT)/etc/zabbix/zabbix_syslog.cfg
	cp zabbix/zabbix-syslog/lib/ZabbixAPI.pm $(CHROOT)/etc/zabbix/scripts/lib/ZabbixAPI.pm
	cp zabbix/zabbix-syslog/70-zabbix_rsyslog.conf $(CHROOT)/etc/rsyslog.d/70-zabbix_rsyslog.conf
	$(inroot)chown -R zabbix:zabbix /etc/zabbix/scripts
	chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl
	chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl

	# FPing
	$(inroot)chmod u=rwsx,g=rx,o=rx /usr/sbin/fping
	$(inroot)chmod u=rwsx,g=rx,o=rx /usr/sbin/fping6

	# SNMP
	cp snmp/snmpd.conf $(CHROOT)/etc/snmp/snmpd.conf
	cp snmp/snmptrapd.conf $(CHROOT)/etc/snmp/snmptrapd.conf
	cp snmp/snmptt.conf $(CHROOT)/etc/snmp/snmptt.conf
	sed -i \
		-e 's:net_snmp_perl_enable = 0:net_snmp_perl_enable = 1:' \
		-e 's:translate_integers = 1:translate_integers = 0:' \
		-e 's:#mibs_environment = ALL:mibs_environment = ALL:' \
		-e 's.#date_time_format =.date_time_format = %H:%M:%S %Y/%m/%d.' \
		-e 's:daemon_uid = snmptt:daemon_uid = zabbix:' \
		-e 's:log_system_enable = 0:log_system_enable = 1:' \
		-e 's:unknown_trap_log_enable = 0:unknown_trap_log_enable = 1:' \
		$(CHROOT)/etc/snmp/snmptt.ini
	mkdir -p $(CHROOT)/var/log/snmptt
	$(inroot)chmod 0775 /var/log/snmptt
	$(inroot)chown zabbix:zabbix /var/log/snmptt

clean: