#!/usr/bin/env bash

set -Eeuo pipefail

DEPLOY_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
cd "$DEPLOY_ROOT"

fail() {
	printf 'ERROR: %s\n' "$*" >&2
	exit 1
}

read_env_setting() {
	local key="$1"
	local value
	value="$(
		sed -n "s/^[[:space:]]*${key}[[:space:]]*=[[:space:]]*//p" .env |
			tail -n 1
	)"
	value="${value#"${value%%[![:space:]]*}"}"
	value="${value%"${value##*[![:space:]]}"}"
	value="${value#\"}"
	value="${value%\"}"
	value="${value#\'}"
	value="${value%\'}"
	printf '%s' "$value"
}

require_env() {
	[[ -f .env ]] || fail "copy .env.example to .env and configure it first"
	BROKER_DOMAIN="$(read_env_setting BROKER_DOMAIN)"
	GITEA_DOMAIN="$(read_env_setting GITEA_DOMAIN)"
	LETSENCRYPT_EMAIL="$(read_env_setting LETSENCRYPT_EMAIL)"
	: "${BROKER_DOMAIN:?BROKER_DOMAIN is required}"
	: "${GITEA_DOMAIN:?GITEA_DOMAIN is required}"
	: "${LETSENCRYPT_EMAIL:?LETSENCRYPT_EMAIL is required}"
}

prepare() {
	mkdir -p \
		config/broker \
		config/gitea/data \
		config/gitea/config \
		config/letsencrypt \
		config/certbot-webroot \
		config/backups
	chmod 700 config/broker config/gitea/data config/gitea/config config/backups
	if [[ "$(id -u)" == 0 ]]; then
		chown -R 1000:1000 config/broker config/gitea
	fi
	docker network inspect tapm-edge >/dev/null 2>&1 ||
		docker network create tapm-edge >/dev/null
}

gitea_compose() {
	docker compose --env-file .env -f deploy/gitea/compose.yaml "$@"
}

case "${1:-}" in
prepare)
	require_env
	prepare
	;;
bootstrap)
	require_env
	prepare
	gitea_compose up -d
	docker compose up -d nginx
	docker compose --profile tools run --rm certbot certonly \
		--webroot --webroot-path /var/www/certbot \
		--non-interactive --agree-tos \
		--email "$LETSENCRYPT_EMAIL" \
		--cert-name "$BROKER_DOMAIN" \
		-d "$BROKER_DOMAIN" -d "$GITEA_DOMAIN"
	docker compose -f compose.yaml -f compose.tls.yaml up -d nginx
	;;
start)
	require_env
	prepare
	gitea_compose up -d
	docker compose -f compose.yaml -f compose.tls.yaml up -d --build
	;;
renew)
	require_env
	docker compose --profile tools run --rm certbot renew --quiet
	docker compose -f compose.yaml -f compose.tls.yaml exec nginx nginx -s reload
	;;
backup)
	require_env
	prepare
	stamp="$(date -u +%Y%m%dT%H%M%SZ)"
	destination="config/backups/${stamp}"
	mkdir -p "$destination"
	docker compose stop broker
	gitea_compose stop gitea
	cp -a config/broker "$destination/"
	cp -a config/gitea "$destination/"
	gitea_compose start gitea
	docker compose -f compose.yaml -f compose.tls.yaml start broker
	printf 'Backup created at %s\n' "$destination"
	;;
status)
	docker compose -f compose.yaml -f compose.tls.yaml ps
	gitea_compose ps
	;;
*)
	printf 'Usage: %s {prepare|bootstrap|start|renew|backup|status}\n' "$0"
	exit 2
	;;
esac