# Copyright (c) Jupyter Development Team.
# Distributed under the terms of the Modified BSD License.

from jupyter_core.paths import jupyter_data_dir
import subprocess
import os
import errno
import stat

jupyter_host = 'localhost'
jupyter_port = '8888'

if 'JUPYTER_HOST' in os.environ:
    jupyter_host = os.environ['JUPYTER_HOST']

if 'JUPYTER_PORT' in os.environ:
    jupyter_port = os.environ['JUPYTER_PORT']

#import pdb
#pdb.set_trace()

c = get_config()
c.NotebookApp.ip = '0.0.0.0'
c.NotebookApp.port = 8888
c.NotebookApp.open_browser = False
c.NotebookApp.token = u''   # used for login without token 
#c.NotebookApp.tornado_settings = { 'headers': { 'Content-Security-Policy': "frame-ancestors %s:%s/" % (jupyter_host,jupyter_port)} }
c.NotebookApp.tornado_settings = { 'headers': { 'Content-Security-Policy': 'none'} }
c.NotebookApp.extra_static_paths = ["/etc/jupyter/custom.js"]
c.NotebookApp.base_url  = 'jupyter/https%3A%2F%2F' + '%s' % (jupyter_host) + '%3A' + '%s' % (jupyter_port)

# https://github.com/jupyter/notebook/issues/3130
c.FileContentsManager.delete_to_trash = False

# Generate a self-signed certificate
if 'GEN_CERT' in os.environ:
    dir_name = jupyter_data_dir()
    pem_file = os.path.join(dir_name, 'notebook.pem')
    try:
        os.makedirs(dir_name)
    except OSError as exc:  # Python >2.5
        if exc.errno == errno.EEXIST and os.path.isdir(dir_name):
            pass
        else:
            raise

    # Generate an openssl.cnf file to set the distinguished name
    cnf_file = os.path.join(os.getenv('CONDA_DIR', '/usr/lib'), 'ssl', 'openssl.cnf')
    if not os.path.isfile(cnf_file):
        with open(cnf_file, 'w') as fh:
            fh.write('''\
[req]
distinguished_name = req_distinguished_name
[req_distinguished_name]
''')

    # Generate a certificate if one doesn't exist on disk
    subprocess.check_call(['openssl', 'req', '-new',
                           '-newkey', 'rsa:2048',
                           '-days', '365',
                           '-nodes', '-x509',
                           '-subj', '/C=XX/ST=XX/L=XX/O=generated/CN=generated',
                           '-keyout', pem_file,
                           '-out', pem_file])
    # Restrict access to the file
    os.chmod(pem_file, stat.S_IRUSR | stat.S_IWUSR)
    c.NotebookApp.certfile = pem_file

# Change default umask for all subprocesses of the notebook server if set in
# the environment
if 'NB_UMASK' in os.environ:
    os.umask(int(os.environ['NB_UMASK'], 8))