#!/bin/bash
set -euo pipefail

apt-get update
apt-get install -y \
  gpg \
  wget \
  lsb-release

ARCH=$(dpkg --print-architecture)
DISTRO=$(lsb_release -cs)

cat <<EOF > /etc/apt/sources.list.d/tor.list
deb     [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
deb-src [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
EOF
wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
apt-get update
apt install -y tor deb.torproject.org-keyring
cp /etc/tor/torrc /etc/tor/torrc.bak
sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable/d' /etc/tor/torrc

 cat << EOF >> /etc/tor/torrc

# Added by script ($(date))
 ControlPort 127.0.0.1:9051
 CookieAuthentication 1
 CookieAuthFileGroupReadable 1
 DisableDebuggerAttachment 1
EOF
systemctl restart tor