#!/bin/sh
# Configure manual-start posture: boot to plain Debian login.
set -eu

# Disable the Debian default site so it doesn't conflict with ours.
rm -f /etc/nginx/sites-enabled/default

# Enable our site symlink only. Runtime nginx startup is user-selected in TUI.
ln -sf /etc/nginx/sites-available/n-os-tr.conf /etc/nginx/sites-enabled/n-os-tr.conf

# Keep Debian getty ownership on tty1/tty2/tty3 in manual-start mode.
systemctl enable getty@tty1.service || true
systemctl enable getty@tty2.service || true
systemctl enable getty@tty3.service || true

# Disable all n-OS-tr units at boot; user starts stack manually after login.
for unit in \
    n-os-tr-firstboot.service \
    nostr-id.service \
    nostr-id-tui.service \
    nostr-id-tui-services.service \
    didactyl.service
 do
    systemctl disable "$unit" 2>/dev/null || true
 done

# Explicitly keep optional services disabled at boot.
for unit in \
    c-relay.service \
    ginxsom.service \
    fips.service \
    fips-dns.service \
    nginx.service \
    nostr-config-loader.service \
    nostr-config-writer.service \
    ssh.service \
    tor.service
 do
    systemctl disable "$unit" 2>/dev/null || true
 done

# Keep gpm disabled/masked to avoid mouse escape/noise on virtual consoles.
systemctl disable gpm.service 2>/dev/null || true
systemctl mask gpm.service 2>/dev/null || true

# Apply preset policy for any additional units.
systemctl preset-all 2>/dev/null || true