#!/usr/bin/env bash
set -euo pipefail

REPO_DIR="/opt/NextWks"
TARGET_DIR="/opt/nextworkspace"
SERVICE_NAME="nextworkspace"
BINARY_NAME="nextworkspace"
HEALTH_CHECK_RETRIES=10
HEALTH_CHECK_INTERVAL=2

# --- Load .env from runtime root ---
ENV_FILE="$TARGET_DIR/.env"
if [ -f "$ENV_FILE" ]; then
    set -a
    source "$ENV_FILE"
    set +a
fi

# Default domain if .env wasn't loaded
DOMAIN="${DOMAIN:-nextwks.eu}"

# --- Mode detection ---
GREENFIELD=false
if [ "${1:-}" = "--destroy" ]; then
    GREENFIELD=true
    echo "[MODE] Greenfield deploy (--destroy)"
elif [ ! -d "$TARGET_DIR" ]; then
    GREENFIELD=true
    echo "[MODE] Greenfield deploy (target missing)"
else
    echo "[MODE] Smart update (target exists)"
fi

# --- Common: pull + build ---
cd "$REPO_DIR"
echo "[1/6] Pulling latest code..."
git pull

echo "[2/6] Building binary..."
export PATH=$PATH:/usr/local/go/bin
go build -o "$BINARY_NAME" .

# --- Greenfield path ---
if [ "$GREENFIELD" = true ]; then
    echo "[3/6] Removing old deployment..."
    rm -rf "$TARGET_DIR"

    echo "[4/6] Creating target directories..."
    mkdir -p "$TARGET_DIR/config/nextworkspace"
    mkdir -p "$TARGET_DIR/config/zoraxy/conf/proxy"
    mkdir -p "$TARGET_DIR/data/zoraxy"
    mkdir -p "$TARGET_DIR/compose"
    mkdir -p "$TARGET_DIR/logs"

    echo "[5/6] Copying binary..."
    cp "$BINARY_NAME" "$TARGET_DIR/$BINARY_NAME"

    echo "[6/6] Deploying Zoraxy..."
    cp compose/zoraxy.yaml "$TARGET_DIR/compose/zoraxy.yaml"
    podman-compose -f "$TARGET_DIR/compose/zoraxy.yaml" up -d 2>&1 || echo "[WARN] Zoraxy deploy had issues (see above)"

    # Generate Zoraxy proxy config (single app.{domain} → binary, auth handled by binary)
    echo "[*] Generating Zoraxy proxy config..."
    cat > "$TARGET_DIR/config/zoraxy/conf/proxy/app.$DOMAIN.config" <<ZORAXY_CFG
{
    "ProxyType": 1,
    "RootOrMatchingDomain": "app.$DOMAIN",
    "ActiveOrigins": [{
        "OriginIpOrDomain": "127.0.0.1:9000",
        "RequireTLS": false,
        "Weight": 1,
        "MaxConn": 0
    }],
    "Disabled": false,
    "AuthenticationProvider": {"AuthMethod": 0}
}
ZORAXY_CFG

    # Copy launcher config files
    cp -r config/nextworkspace/* "$TARGET_DIR/config/nextworkspace/"

    # Generate launcher apps.yaml with path-based URLs
    echo "[*] Generating apps.yaml..."
    cat > "$TARGET_DIR/config/nextworkspace/apps.yaml" <<EOF
apps:
  - name: "OpenCloud"
    subtitle: "File Storage"
    path: "/cloud"
    upstream: "http://127.0.0.1:9100"
    icon: "cloud"
  - name: "Euro Office"
    subtitle: "Collaborative Suite"
    path: "/office"
    upstream: "http://127.0.0.1:9200"
    icon: "office"
  - name: "ERPNext"
    subtitle: "Enterprise ERP"
    path: "/erp"
    upstream: "http://127.0.0.1:9300"
    icon: "erp"
  - name: "Matrix Chat"
    subtitle: "Team Communication"
    path: "/chat"
    upstream: "http://127.0.0.1:9400"
    icon: "chat"
  - name: "Jitsi"
    subtitle: "Video Conferencing"
    path: "/meet"
    upstream: "http://127.0.0.1:9500"
    icon: "video"
  - name: "Webmail"
    subtitle: "Email Client"
    path: "/mail"
    upstream: "http://127.0.0.1:9600"
    icon: "mail"
  - name: "AI Chat"
    subtitle: "Open WebUI"
    path: "/ai"
    upstream: "http://127.0.0.1:9700"
    icon: "bot"
  - name: "Portainer"
    subtitle: "Container Management"
    path: "/admin"
    upstream: "http://127.0.0.1:9800"
    icon: "admin"
EOF

    # Restart Zoraxy to pick up config
    echo "[*] Restarting Zoraxy to apply config..."
    podman-compose -f "$TARGET_DIR/compose/zoraxy.yaml" restart 2>&1 || true
    sleep 2

    # Write systemd service with EnvironmentFile for .env vars
    echo "[*] Writing systemd service..."
    cat > /etc/systemd/system/$SERVICE_NAME.service <<UNIT
[Unit]
Description=NextWorkspace Launcher + Auth Proxy
After=network.target

[Service]
Environment=CONFIG_DIR=$TARGET_DIR/config/nextworkspace
EnvironmentFile=$TARGET_DIR/.env
ExecStart=$TARGET_DIR/$BINARY_NAME
WorkingDirectory=$TARGET_DIR
Restart=always
User=root
Group=root

[Install]
WantedBy=multi-user.target
UNIT

    systemctl daemon-reload
    systemctl enable --now $SERVICE_NAME

# --- Smart update path ---
else
    echo "[3/6] Stopping launcher..."
    systemctl stop $SERVICE_NAME 2>/dev/null || true

    echo "[4/6] Swapping binary..."
    cp "$BINARY_NAME" "$TARGET_DIR/$BINARY_NAME"

    echo "[5/6] Refreshing configs..."
    if [ -f config/nextworkspace/apps.yaml ]; then
        cp config/nextworkspace/apps.yaml "$TARGET_DIR/config/nextworkspace/apps.yaml"
    fi
    if [ -d config/zoraxy/conf/proxy ]; then
        cp config/zoraxy/conf/proxy/* "$TARGET_DIR/config/zoraxy/conf/proxy/" 2>/dev/null || true
    fi

    echo "[6/6] Restarting Zoraxy and launcher..."
    podman-compose -f "$TARGET_DIR/compose/zoraxy.yaml" restart 2>&1 || true
    systemctl restart $SERVICE_NAME
fi

# --- Health check ---
echo "[*] Running health check..."
for i in $(seq 1 $HEALTH_CHECK_RETRIES); do
    if curl -sf http://127.0.0.1:9000/health > /dev/null 2>&1; then
        echo "[OK] NextWorkspace launcher is healthy on http://127.0.0.1:9000/"
        exit 0
    fi
    echo "  Attempt $i/$HEALTH_CHECK_RETRIES — not ready yet..."
    sleep $HEALTH_CHECK_INTERVAL
done

echo "[FAIL] Health check failed — launcher did not respond on port 9000"
exit 1