#! /usr/bin/bash

set -euo pipefail
IFS=$'\n\t'

run0 cp "$(systemd-path user-configuration)"/setup/sources.list.d/tor.sources /etc/apt/sources.list.d/
run0 chmod 644 /etc/apt/sources.list.d/tor.sources

outfile=/usr/share/keyrings/deb.torproject.org-keyring.pgp
curl --silent https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | run0 tee "${outfile}" >/dev/null
run0 chmod 644 "${outfile}"

TOR_PKGS=(
    # keep-sorted start
    deb.torproject.org-keyring
    tor
    torbrowser-launcher
    # keep-sorted end
)

run0 apt update
run0 apt install --no-install-recommends --yes "${TOR_PKGS[@]}"