#!/usr/bin/env bash
set -euo pipefail

# Ensure script is run as root (required for apt + /etc)
if [[ "$EUID" -ne 0 ]]; then
  echo "Please run as root (or use sudo)." >&2
  exit 1
fi

#set script directory
scriptdir="$(dirname "$(realpath "$0")")"

# recursive replace function
replace_string_recursive() {
    local DIRECTORY="$1"
    local OLD_STRING="$2"
    local NEW_STRING="$3"

    if [ ! -d "$DIRECTORY" ]; then
        echo "Error: Directory '$DIRECTORY' does not exist."
        return 1
    fi

    echo "Starting replacement of '$OLD_STRING' with '$NEW_STRING' in '$DIRECTORY'..."
    find "$DIRECTORY" -type f -exec sed -i "s|$OLD_STRING|$NEW_STRING|g" {} +

    if [ $? -eq 0 ]; then
        echo "Replacement completed successfully."
        return 0
    else
        echo "An error occurred during replacement."
        return 1
    fi
}

# example use
# replace_string_recursive "/path/to/directory" "oldstring" "newstring"

# sqlite db replace function
replace_in_sqlite_db() {
    local DB_PATH="$1"
    local OLD_STRING="$2"
    local NEW_STRING="$3"

    # Check if the database file exists
    if [ ! -f "$DB_PATH" ]; then
        echo "Error: Database file '$DB_PATH' does not exist."
        exit 1
    fi

    echo "Starting safe replacement of '$OLD_STRING' with '$NEW_STRING' in '$DB_PATH'..."

    # Create a backup of the original database
    local BACKUP_PATH="${DB_PATH}.bak"
    cp "$DB_PATH" "$BACKUP_PATH"

    # Dump the database to SQL
    local DUMP_PATH="${DB_PATH}.sql"
    sqlite3 "$DB_PATH" ".dump" > "$DUMP_PATH"

    # Replace strings in the SQL dump
    sed -i "s|$OLD_STRING|$NEW_STRING|g" "$DUMP_PATH"

    # Create a new database from the modified SQL dump
    local NEW_DB_PATH="${DB_PATH}.new"
    sqlite3 "$NEW_DB_PATH" < "$DUMP_PATH"

    # Replace the original database with the new one
    mv "$NEW_DB_PATH" "$DB_PATH"

    # Clean up temporary files
    rm "$DUMP_PATH"

    echo "Replacement completed in '$DB_PATH'. Original database backed up to '$BACKUP_PATH'."
}

#example usage: replace_in_sqlite_db "database.sqlite" "Europe/Amsterdam" "UTC"



# what this script needs to do:

# request all install parameters needed from user
# ---- User input ----
read -rp "Admin email: " adminemail < /dev/tty
read -rsp "Admin password: " adminpass < /dev/tty
echo
read -rp "Timezone (e.g. Europe/Amsterdam): " timezone < /dev/tty
read -rp "Domain (e.g. example.com): " domain < /dev/tty

# Public IP (tries multiple services)
publicip="$(curl -fsS https://api.ipify.org || curl -fsS https://ifconfig.me || echo "UNKNOWN")"

# Local IP (first non-loopback)
localip="$(hostname -I | awk '{print $1}')"

# generate random passwords for DB hosts and other secrets

# ---- Random generators ----
rand_hex() { openssl rand -hex 24; }
rand_b64() { openssl rand -base64 32; }

ownclouddbpass="$(rand_hex)"
ownclouddbrootpass="$(rand_hex)"
convertxJWT="$(rand_hex)"
bookstackkey="$(rand_b64)"        # base64 as requested
bookstackdbpass="$(rand_hex)"
bookstackdbrootpass="$(rand_hex)"
onlyofficeJWT="$(rand_hex)"

# install docker
echo "Updating apt and installing prerequisites..."
apt update
apt install -y ca-certificates curl

echo "Setting up Docker GPG key..."
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
  -o /etc/apt/keyrings/docker.asc
chmod a+r /etc/apt/keyrings/docker.asc

echo "Adding Docker apt repository..."
. /etc/os-release

cat > /etc/apt/sources.list.d/docker.sources <<EOF
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: ${UBUNTU_CODENAME:-$VERSION_CODENAME}
Components: stable
Signed-By: /etc/apt/keyrings/docker.asc
EOF

echo "Updating apt and installing Docker..."
apt update
apt install -y \
  docker-ce \
  docker-ce-cli \
  containerd.io \
  docker-buildx-plugin \
  docker-compose-plugin

echo "Docker installation complete."
docker --version

# install dockge
mkdir -p  /opt/dockge
cd /opt/dockge

# Download your compose.yaml
curl "https://dockge.kuma.pet/compose.yaml?port=5001&stacksPath=%2Fopt%2Fstacks" --output compose.yaml

# write configuration to compose files
cp -r $scriptdir/stacks /opt
cp -r $scriptdir/scripts /opt
chmod -R 775 /opt/stacks

cd /opt/stacks
git clone https://github.com/trantienloi2404/youtube-downloader.git downloader

#adminemail
replace_string_recursive "/opt/stacks" "?adminemail?" $adminemail
#adminpass
replace_string_recursive "/opt/stacks" "?adminpass?" $adminpass
#timezone
replace_string_recursive "/opt/stacks" "?timezone?" $timezone
#domain
replace_string_recursive "/opt/stacks" "?domain?" $domain
#publicip
replace_string_recursive "/opt/stacks" "?publicip?" $publicip
#localip
replace_string_recursive "/opt/stacks" "?localip?" $localip
#ownclouddbpass
replace_string_recursive "/opt/stacks" "?ownclouddbpass?" $ownclouddbpass
#ownclouddbrootpass
replace_string_recursive "/opt/stacks" "?ownclouddbrootpass?" $ownclouddbrootpass
#convertxJWT
replace_string_recursive "/opt/stacks" "?convertxJWT?" $convertxJWT
#bookstackkey
replace_string_recursive "/opt/stacks" "?bookstackkey?" $bookstackkey
#bookstackdbpass
replace_string_recursive "/opt/stacks" "?bookstackdbpass?" $bookstackdbpass
#bookstackdbrootpass
replace_string_recursive "/opt/stacks" "?bookstackdbrootpass?" $bookstackdbrootpass
#onlyofficeJWT
replace_string_recursive "/opt/stacks" "?onlyofficeJWT?" $onlyofficeJWT


# install mailcow to /opt/stacks/mailcow so it shows up in dockge
apt install -y git openssl curl gawk coreutils grep jq sqlite3
umask 0022
#cd /opt/stacks
#git clone https://github.com/mailcow/mailcow-dockerized mailcow
#cd /opt/stacks/mailcow
#bash ./generate_config.sh < /dev/tty

#disable stub listener

echo "DNSStubListener=no" | tee -a /etc/systemd/resolved.conf



# up dockge
cd /opt/dockge
docker compose up -d

# call replacements for nginx db
replace_in_sqlite_db "/opt/stacks/npm/data/database.sqlite" "<domain>" $domain
replace_in_sqlite_db "/opt/stacks/npm/data/database.sqlite" "<localip>" $localip
replace_in_sqlite_db "/opt/stacks/npm/data/database.sqlite" "<adminpass>" $adminpass


echo ""
echo ""
echo ""
echo "you can now access the dockge GUI interface at $localip:5001 and the proxy interface at $localip:81 once you start it from Dockge. be sure to forward ports 80, 443 and 51820 to $localip in your router settings"
echo "please reboot before further setup"