#!/bin/sh
#
# Ente on Unraid: setup helper.
#
# Run this in the Unraid terminal BEFORE installing the Ente-Server template:
#
#   sh -c "$(curl -fsSL https://raw.githubusercontent.com/YoshiroMaximus/unraid-templates/main/ente/setup.sh)"
#
# It generates all required secrets, writes /mnt/user/appdata/ente/museum.yaml,
# and prints the matching values to use in your PostgreSQL and MinIO containers.

set -e

CONFIG_DIR=/mnt/user/appdata/ente
CONFIG_FILE=$CONFIG_DIR/museum.yaml

if [ -f "$CONFIG_FILE" ]; then
    echo "ERROR: $CONFIG_FILE already exists. Delete it first to start over."
    exit 1
fi
if [ -d "$CONFIG_FILE" ]; then
    echo "ERROR: $CONFIG_FILE is a directory (created by Docker starting without a config)."
    echo "Remove it with: rmdir $CONFIG_FILE"
    exit 1
fi

gen_password () { head -c 21 /dev/urandom | base64 | tr -d '\n'; }
gen_key ()      { head -c 32 /dev/urandom | base64 | tr -d '\n'; }
gen_hash ()     { head -c 64 /dev/urandom | base64 | tr -d '\n'; }
gen_jwt ()      { head -c 32 /dev/urandom | base64 | tr -d '\n' | tr '+/' '-_'; }

DEFAULT_IP=$(ip -4 route get 1 2>/dev/null | awk '{for(i=1;i<=NF;i++) if($i=="src") print $(i+1)}' | head -n1)
printf "Unraid LAN IP [%s]: " "${DEFAULT_IP:-none detected}"
read -r SERVER_IP
SERVER_IP=${SERVER_IP:-$DEFAULT_IP}
if [ -z "$SERVER_IP" ]; then
    echo "ERROR: could not detect an IP, please re-run and enter it."
    exit 1
fi

printf "MinIO API port [3200]: "
read -r MINIO_PORT
MINIO_PORT=${MINIO_PORT:-3200}

PG_PASS=$(gen_password)
MINIO_USER=ente
MINIO_PASS=$(gen_password)

mkdir -p "$CONFIG_DIR"

cat >"$CONFIG_FILE" <<EOF
db:
    host: $SERVER_IP
    port: 5432
    name: ente_db
    user: pguser
    password: $PG_PASS

s3:
    are_local_buckets: true
    use_path_style_urls: true
    b2-eu-cen:
        key: $MINIO_USER
        secret: $MINIO_PASS
        endpoint: $SERVER_IP:$MINIO_PORT
        region: eu-central-2
        bucket: b2-eu-cen

apps:
    public-albums: http://$SERVER_IP:3002
    cast: http://$SERVER_IP:3004
    accounts: http://$SERVER_IP:3001

key:
    encryption: $(gen_key)
    hash: $(gen_hash)

jwt:
    secret: $(gen_jwt)
EOF

chmod 600 "$CONFIG_FILE"

echo
echo "Wrote $CONFIG_FILE"
echo
echo "Use these values when installing the other containers:"
echo
echo "  PostgreSQL:  POSTGRES_USER=pguser"
echo "               POSTGRES_PASSWORD=$PG_PASS"
echo "               POSTGRES_DB=ente_db"
echo
echo "  MinIO:       MINIO_ROOT_USER=$MINIO_USER"
echo "               MINIO_ROOT_PASSWORD=$MINIO_PASS"
echo "               API port $MINIO_PORT, and create a bucket named: b2-eu-cen"
echo
echo "  Ente-Web:    ENTE_API_ORIGIN=http://$SERVER_IP:8080"
echo "               ENTE_ALBUMS_ORIGIN=http://$SERVER_IP:3002"
echo

if command -v docker >/dev/null; then
    printf "Create the b2-eu-cen bucket now via MinIO at %s:%s? Requires MinIO to be running already. (y/N): " "$SERVER_IP" "$MINIO_PORT"
    read -r choice
    case "$choice" in
        y|Y)
            docker run --rm --entrypoint sh minio/mc -c \
                "mc alias set ente http://$SERVER_IP:$MINIO_PORT '$MINIO_USER' '$MINIO_PASS' && mc mb -p ente/b2-eu-cen" \
                && echo "Bucket created." \
                || echo "Bucket creation failed. Create 'b2-eu-cen' via the MinIO console instead."
            ;;
    esac
fi

echo "Done. Install order: PostgreSQL, MinIO (+ bucket), Ente-Server, Ente-Web."