#!/bin/bash
# SPDX-License-Identifier: Apache-2.0
# Runegate Installation Script for Debian-based systems
# This script will:
# 1. Install required dependencies
# 2. Create a runegate user and group
# 3. Create directory structure
# 4. Build the Runegate application
# 5. Install Runegate application and static files
# 6. Set up configuration files with proper permissions
# 7. Configure the systemd service
# 8. Configure nginx (if present)
# 9. Display final instructions

set -e

# Must be run as root
if [ "$(id -u)" -ne 0 ]; then
    echo "This script must be run as root" >&2
    exit 1
fi

# Print banner
echo "============================================="
echo "       Runegate Deployment Script"
echo "============================================="
echo ""

# Configuration variables
RUNEGATE_USER="runegate"
RUNEGATE_GROUP="runegate"
INSTALL_DIR="/opt/runegate"
CONFIG_DIR="/etc/runegate"
LOG_DIR="/var/log/runegate"
DATA_DIR="/var/lib/runegate"
REPO_DIR="$(pwd)"
SETUP_NGINX=false

# Parse command line arguments
while [[ $# -gt 0 ]]; do
  case $1 in
    --setup-nginx)
      SETUP_NGINX=true
      shift
      ;;
    *)
      # Unknown option
      echo "Unknown option: $1"
      echo "Usage: $0 [--setup-nginx]"
      exit 1
      ;;
  esac
done

# Check if this script is run from the repository root
if [ ! -f "$REPO_DIR/Cargo.toml" ] || [ ! -d "$REPO_DIR/src" ]; then
    echo "Error: This script must be run from the Runegate repository root" >&2
    exit 1
fi

echo "Step 1: Installing required dependencies..."
apt-get update
apt-get install -y curl build-essential pkg-config libssl-dev

# Install Rust if not already installed
if ! command -v rustc &> /dev/null; then
    echo "  Installing Rust..."
    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
    source $HOME/.cargo/env
fi

echo "Step 2: Creating runegate user and group..."
if ! getent group "$RUNEGATE_GROUP" > /dev/null; then
    echo "  Creating system group '$RUNEGATE_GROUP'..."
    groupadd --system "$RUNEGATE_GROUP"
fi

if ! getent passwd "$RUNEGATE_USER" > /dev/null; then
    echo "  Creating system user '$RUNEGATE_USER'..."
    useradd --system --gid "$RUNEGATE_GROUP" --shell /bin/false --home-dir "$INSTALL_DIR" "$RUNEGATE_USER"
fi

echo "Step 3: Creating directory structure..."
# Create required directories
mkdir -p "$INSTALL_DIR/bin"
mkdir -p "$CONFIG_DIR"
mkdir -p "$LOG_DIR"
mkdir -p "$DATA_DIR"

echo "Step 4: Building Runegate application..."
# Build the application
cargo build --release

echo "Step 5: Installing Runegate application..."
# Copy binary to install location
cp "$REPO_DIR/target/release/runegate" "$INSTALL_DIR/bin/"
chmod 755 "$INSTALL_DIR/bin/runegate"

# Copy static files and templates
if [ -d "$REPO_DIR/static" ]; then
    mkdir -p "$INSTALL_DIR/static"
    cp -r "$REPO_DIR/static/"* "$INSTALL_DIR/static/"
fi

# Handle environment configuration
if [ ! -f "$CONFIG_DIR/runegate.env" ]; then
    # First-time installation: Create new environment file
    if [ -f "$REPO_DIR/.env.example" ]; then
        echo "Creating new environment configuration from example..."
        echo "# Copied from .env.example - Modify for your environment" > "$CONFIG_DIR/runegate.env"
        cat "$REPO_DIR/.env.example" >> "$CONFIG_DIR/runegate.env"
        
        # Generate secure secrets for new installation
        echo "Generating secure secrets for JWT and session..."
        "$REPO_DIR/deploy/generate_secrets.sh" "$CONFIG_DIR/runegate.env"
    else
        echo "⚠️  Warning: Environment example not found at $REPO_DIR/.env.example"
        echo "   Creating minimal environment file"
        touch "$CONFIG_DIR/runegate.env"
    fi
else
    echo "Preserving existing environment configuration at $CONFIG_DIR/runegate.env"
    
    # Check if secrets exist in the file
    if ! grep -q "RUNEGATE_JWT_SECRET" "$CONFIG_DIR/runegate.env" || ! grep -q "RUNEGATE_SESSION_KEY" "$CONFIG_DIR/runegate.env"; then
        echo "Adding missing secrets to existing environment file..."
        "$REPO_DIR/deploy/generate_secrets.sh" "$CONFIG_DIR/runegate.env"
    fi
fi

# Handle email configuration
mkdir -p "$CONFIG_DIR/config"

# Only create email.toml if it doesn't exist already
if [ ! -f "$CONFIG_DIR/config/email.toml" ] && [ -f "$REPO_DIR/config/email.toml.example" ]; then
    echo "Creating new email configuration from example..."
    cp "$REPO_DIR/config/email.toml.example" "$CONFIG_DIR/config/email.toml"
    # Remind user to update it
    echo "⚠️  Please update the email configuration at $CONFIG_DIR/config/email.toml"
else
    if [ -f "$CONFIG_DIR/config/email.toml" ]; then
        echo "Preserving existing email configuration at $CONFIG_DIR/config/email.toml"
    else
        echo "⚠️  Warning: Email configuration example not found at $REPO_DIR/config/email.toml.example"
        echo "   You will need to create $CONFIG_DIR/config/email.toml manually"
    fi
fi

echo "Step 6: Setting correct permissions..."
# Set proper ownership and permissions
chown -R "$RUNEGATE_USER:$RUNEGATE_GROUP" "$INSTALL_DIR"
chown -R "$RUNEGATE_USER:$RUNEGATE_GROUP" "$CONFIG_DIR"
chown -R "$RUNEGATE_USER:$RUNEGATE_GROUP" "$LOG_DIR"
chown -R "$RUNEGATE_USER:$RUNEGATE_GROUP" "$DATA_DIR"

# Make config files secure
chmod 750 "$CONFIG_DIR"
chmod 640 "$CONFIG_DIR/runegate.env"
if [ -f "$CONFIG_DIR/config/email.toml" ]; then
    chmod 640 "$CONFIG_DIR/config/email.toml"
fi

echo "Step 7: Installing systemd service..."
# Copy systemd service file
cp "$REPO_DIR/deploy/systemd/runegate.service" /etc/systemd/system/

# Reload systemd to recognize the new service
systemctl daemon-reload

echo "Step 8: Setting up nginx configuration (optional)..."
if [ "$SETUP_NGINX" = true ]; then
    if command -v nginx &> /dev/null; then
        if [ -d "$REPO_DIR/deploy/nginx" ] && [ -f "$REPO_DIR/deploy/nginx/runegate-nginx.conf" ]; then
            echo "  Installing Runegate nginx configuration..."
            
            # Create sites-available directory if it doesn't exist
            mkdir -p /etc/nginx/sites-available
            mkdir -p /etc/nginx/sites-enabled
            
            # Copy the nginx configuration
            cp "$REPO_DIR/deploy/nginx/runegate-nginx.conf" /etc/nginx/sites-available/
            
            # Enable the site if not already enabled
            if [ ! -L /etc/nginx/sites-enabled/runegate-nginx.conf ]; then
                ln -s /etc/nginx/sites-available/runegate-nginx.conf /etc/nginx/sites-enabled/
                echo "  Nginx site enabled. Don't forget to update the server_name in the config."
            fi
            
            # Check if nginx configuration is valid
            if nginx -t; then
                echo "  Nginx configuration is valid. Don't forget to reload nginx:"
                echo "    sudo systemctl reload nginx"
            else
                echo "  ⚠️  Warning: Nginx configuration test failed. Please check the configuration."
            fi
        else
            echo "  ⚠️  Warning: Runegate nginx configuration not found at $REPO_DIR/deploy/nginx/runegate-nginx.conf"
            echo "     You will need to set up nginx forwarding manually."
        fi
    else
        echo "  ⚠️  Warning: Nginx not detected but --setup-nginx was specified."
        echo "     Please install nginx first."
    fi
else
    echo "  Nginx configuration skipped. To set up nginx, re-run with --setup-nginx flag."
    echo "  For manual nginx configuration, see the documentation in deploy/README.md"
fi

echo "Step 9: Final instructions..."
echo "============================================="
echo "Installation Complete!"
echo "============================================="
echo ""
echo "The Runegate service has been installed but not started."
echo ""
echo "IMPORTANT: Before starting the service:"
echo "1. Edit the configuration file: $CONFIG_DIR/runegate.env"
echo "2. Configure your email settings: $CONFIG_DIR/config/email.toml"
echo ""
echo "Then, start and enable the service with:"
echo "  systemctl start runegate"
echo "  systemctl enable runegate"
echo ""
echo "To check service status:"
echo "  systemctl status runegate"
echo ""
echo "To view logs:"
echo "  journalctl -u runegate -f"
echo "============================================="