#!/usr/bin/env bash
# cek-firstday.sh — laporan checklist hardening hari pertama VPS.
# Membaca berkas snapshot di direktori kerja; selalu berakhir sukses.
BATAS_PAKET=5

paket=$(cat status-paket.txt)
user_admin=$(cat status-user.txt)
firewall=$(cat status-firewall.txt)
sshd=$(cat status-sshd.txt)

echo "== Checklist First-Day =="
if [ "$paket" -le "$BATAS_PAKET" ]; then
  printf 'paket   : OK      (%s menunggu update, batas %s)\n' "$paket" "$BATAS_PAKET"
else
  printf 'paket   : PERIKSA (%s menunggu update, batas %s)\n' "$paket" "$BATAS_PAKET"
fi

if [ "$user_admin" = "budi" ]; then
  echo "user    : OK      (budi sudah dibuat)"
else
  echo "user    : PERIKSA (user admin belum dibuat)"
fi

if [ "$firewall" = "active" ]; then
  echo "firewall: OK      (ufw aktif)"
else
  echo "firewall: PERIKSA (ufw belum aktif)"
fi

if [ "$sshd" = "PasswordAuthentication no" ]; then
  echo "sshd    : OK      (password login dimatikan)"
else
  echo "sshd    : PERIKSA (password login masih terbuka)"
fi