#!/bin/sh
# Consurgam Schutz fuer Linux entfernen / Remove Consurgam protection for Linux (version 1)
# Undoes exactly what consurgam-linux.sh set. Run as root. Sends nothing, downloads nothing.
set -eu
if [ "$(id -u)" -ne 0 ]; then
  echo "Bitte als root starten (sudo sh $0) / Please run as root (sudo sh $0)." >&2
  exit 1
fi

rm -f /etc/systemd/resolved.conf.d/consurgam.conf
if systemctl is-active --quiet systemd-resolved; then
  systemctl restart systemd-resolved
  resolvectl flush-caches 2>/dev/null || true
fi

for d in /etc/opt/chrome/policies/managed /etc/chromium/policies/managed /etc/chromium-browser/policies/managed /etc/brave/policies/managed /etc/opt/edge/policies/managed; do
  rm -f "$d/consurgam.json"
done

FF=/etc/firefox/policies/policies.json
if [ -f /etc/firefox/policies/.consurgam ]; then
  rm -f "$FF" /etc/firefox/policies/.consurgam
elif [ -s "$FF" ] && command -v python3 >/dev/null 2>&1; then
  python3 - "$FF" <<'EOF'
import json, sys
p = sys.argv[1]
d = json.load(open(p))
pol = d.get("policies", {})
for k in ("DisablePrivateBrowsing", "PrivateBrowsingModeAvailability", "DNSOverHTTPS"):
    pol.pop(k, None)
json.dump(d, open(p, "w"), indent=2)
EOF
fi
echo "Consurgam-Schutz entfernt. Browser neu starten. / Consurgam protection removed. Restart your browsers."