#!/bin/sh
# bee-sshsetup — configure SSH access
# Called by bee-sshsetup.service before SSH starts.

log() { echo "[bee-sshsetup] $*"; }

# Always create dedicated 'bee' user for password fallback.
if ! id bee > /dev/null 2>&1; then
    useradd -m -s /bin/sh bee > /dev/null 2>&1
fi
echo "bee:eeb" | chpasswd > /dev/null 2>&1

if [ -f /etc/bee-ssh-password-fallback ]; then
    log "SSH key auth unavailable — password fallback active"
    log "Login: bee / eeb"
else
    log "SSH key auth configured"
fi