#!/bin/bash

timedatectl set-timezone Europe/Madrid

start_time=`date`
  
echo "provisioning started: ${start_time}" 

#### The user must fill these variables - START

MACHINE_HOSTNAME=

KEYCLOAK_VERSION=

#### The user must fill these variables - END

KEYCLOAK_USER=kck


KEYCLOAK_INSTALLER_VERSION=keycloak-${KEYCLOAK_VERSION}

NETWORK_INTERFACE=eth0

hostnamectl set-hostname ${MACHINE_HOSTNAME}

# Print some information about the container OS
hostnamectl

# Print some information about the container timezone
timedatectl

#####################################################################
## Get the IP address into an environment variable. This command outputs 
## an empty variable if the network interface name is not ${NETWORK_INTERFACE}
#####################################################################
ip_address=`ip -4 addr show ${NETWORK_INTERFACE} | grep -oP '(?<=inet\s)\d+(\.\d+){3}'`

adduser --disabled-password --gecos GECOS ${KEYCLOAK_USER}
 
usermod -p "`openssl passwd -1  -salt 5RPVAd ${KEYCLOAK_USER}`" ${KEYCLOAK_USER}
 
adduser ${KEYCLOAK_USER} sudo

apt update
 
apt install  -y  openjdk-11-jdk unzip

unzip /vagrant/artifacts/${KEYCLOAK_INSTALLER_VERSION}.zip

mv ${KEYCLOAK_INSTALLER_VERSION} /opt
 
 ln -s /opt/${KEYCLOAK_INSTALLER_VERSION}  /opt/keycloak
 
chown -R kck.kck /opt/${KEYCLOAK_INSTALLER_VERSION}

mkdir /etc/keycloak

cp /vagrant/artifacts/keycloak-env.conf /etc/keycloak/keycloak-env.conf

cp /vagrant/artifacts/keycloak.service /etc/systemd/system/keycloak.service

sed -i "s|#KEYCLOAK_USER#|${KEYCLOAK_USER}|g" /etc/systemd/system/keycloak.service

cp /vagrant/artifacts/keycloak.conf /opt/keycloak/conf/keycloak.conf

sed -i "s|#MACHINE_HOSTNAME#|${MACHINE_HOSTNAME}|g" /opt/keycloak/conf/keycloak.conf

export CAROOT=/vagrant/artifacts/

/vagrant/artifacts/mkcert -install

/vagrant/artifacts/mkcert  --cert-file /opt/keycloak/conf/server-crt.pem --key-file /opt/keycloak/conf/server-key.pem "${MACHINE_HOSTNAME}"

chown kck.kck /opt/keycloak/conf/server-crt.pem /opt/keycloak/conf/server-key.pem
systemctl daemon-reload
 
systemctl enable keycloak

systemctl start keycloak

systemctl status keycloak

end_time=`date`

echo "This container has IP (interface: ${NETWORK_INTERFACE}): ${ip_address}"

echo "If you add this IP to the hostname (${MACHINE_HOSTNAME}) in your hosts file:"

echo "	You can connect with user ${KEYCLOAK_USER} via ssh (password ${KEYCLOAK_USER}): ssh ${KEYCLOAK_USER}@${MACHINE_HOSTNAME}"

echo "	Your Keycloak Server instance is  accessible via the following URL: https://${MACHINE_HOSTNAME}:8443"

echo " 	The admin panel is accessible with user 'admin' and password 'admin'"

echo "provisioning started: ${start_time}" 
 
echo "provisioning ended: ${end_time}"