#!/usr/bin/env bash
set -euo pipefail

# NextWorkspace Installer — bootstraps a bare Linux VM
# Idempotent: safe to run multiple times.

TARGET_DIR="/opt/nextworkspace"
BACKUP_DIR="/opt/backup"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"

# --- Create backup vault and runtime directories ---
echo "=== NextWorkspace Setup ==="
mkdir -p "$BACKUP_DIR/certificates"
mkdir -p "$TARGET_DIR/config/nextworkspace"
mkdir -p "$TARGET_DIR/config/zoraxy/conf/proxy"
mkdir -p "$TARGET_DIR/config/zoraxy/www/html"
mkdir -p "$TARGET_DIR/data/zoraxy"
mkdir -p "$TARGET_DIR/compose"
mkdir -p "$TARGET_DIR/logs"

# --- Interactive prompts (no defaults — user enters everything) ---
read -p "Domain: " DOMAIN
while [ -z "$DOMAIN" ]; do
  read -p "Domain (required): " DOMAIN
done

read -p "TLS email (Let's Encrypt): " TLS_EMAIL
while [ -z "$TLS_EMAIL" ]; do
  read -p "TLS email (required): " TLS_EMAIL
done
# Basic email validation (must contain @)
while echo "$TLS_EMAIL" | grep -qv '@'; do
  read -p "Invalid email — must contain @: " TLS_EMAIL
done

read -p "Admin username: " ADMIN_USERNAME
while [ -z "$ADMIN_USERNAME" ]; do
  read -p "Admin username (required): " ADMIN_USERNAME
done

# Generate 12-char alphanumeric password (easy to type)
ADMIN_PASSWORD=$(tr -dc 'A-Za-z0-9' < /dev/urandom | head -c 12 2>/dev/null || date +%s | head -c 12)

echo ""
echo "========================================"
echo "  Domain:        $DOMAIN"
echo "  TLS email:     $TLS_EMAIL"
echo "  Admin username: $ADMIN_USERNAME"
echo "  Admin password: $ADMIN_PASSWORD"
echo "  Save this password — it won't be shown again!"
echo "========================================"
echo ""

# Write .env file in backup vault (deploy.sh copies it to production)
ENV_FILE="$BACKUP_DIR/.env"
cat > "$ENV_FILE" <<EOF
# NextWorkspace Configuration
# This file is auto-generated by install.sh — do not edit manually
DOMAIN=$DOMAIN
TLS_EMAIL=$TLS_EMAIL
ADMIN_USERNAME=$ADMIN_USERNAME
ADMIN_PASSWORD=$ADMIN_PASSWORD
EOF

chmod 600 "$ENV_FILE"

# ---- Go ----
if command -v go &>/dev/null; then
	echo "[SKIP] Go already installed: $(go version)"
else
	echo "[INSTALL] Installing Go..."
	GO_URL="https://go.dev/dl/$(curl -sL https://go.dev/VERSION?m=text | head -1).linux-amd64.tar.gz"
	curl -sL "$GO_URL" -o /tmp/go.tar.gz
	rm -rf /usr/local/go
	tar -C /usr/local -xzf /tmp/go.tar.gz
	rm /tmp/go.tar.gz
	echo 'export PATH=$PATH:/usr/local/go/bin' > /etc/profile.d/go.sh
	chmod +x /etc/profile.d/go.sh
	export PATH=$PATH:/usr/local/go/bin
	echo "[OK] Go installed: $(go version)"
fi

# ---- System deps ----
echo "[INSTALL] git, build-essential, podman, podman-compose..."
apt-get update -qq
apt-get install -y -qq git build-essential curl podman podman-compose

# ---- Deploy: use current scripts + tools ---
REPO_DIR="/opt/NextWks"
mkdir -p "$REPO_DIR"

# Copy current code to REPO_DIR (includes all latest changes)
echo "[COPY] Deploying current code to $REPO_DIR..."
cp -r "$SCRIPT_DIR"/* "$REPO_DIR/"
cp "$SCRIPT_DIR"/.gitignore "$REPO_DIR/" 2>/dev/null || true

# Ensure tools are executable
chmod +x "$REPO_DIR/deploy.sh" "$REPO_DIR/install.sh" 2>/dev/null || true

echo "[DONE] Bootstrapping complete. Running first deploy..."
"$REPO_DIR/deploy.sh" --destroy