#!/bin/sh

if [ ! -e /etc/ssh/sshd_config ]; then
    mkdir -p /etc/ssh/sshd_config.d
    echo "Include /etc/ssh/sshd_config.d/*.conf
PermitRootLogin yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication yes
AllowTcpForwarding yes
GatewayPorts no
X11Forwarding no
Subsystem sftp internal-sftp" > /etc/ssh/sshd_config
fi

if [ -z "$SET_SHELL" ]; then
    SET_SHELL="/bin/bash"
fi

if [ "$SET_SHELL" = "zsh" ]; then
    SET_SHELL="/bin/zsh"
fi

if [ "$SET_SHELL" = "fish" ]; then
    SET_SHELL="/usr/bin/fish"
fi

chsh -s $SET_SHELL

# Cloud image generates this file which prevents sshd from accepting passwords
rm -f /etc/ssh/sshd_config.d/50-cloud-init.conf

exec /usr/sbin/sshd -E /var/log/sshd.log -D