#!/bin/bash

timedatectl set-timezone Europe/Madrid

start_time=`date`
  
echo "provisioning started: ${start_time}" 

#### The user must fill these variables 

# Fully Qualified Name: ex. talki-hpb.localenv.com
MACHINE_HOSTNAME=

# URL of the Nextcloud instance to be used as backend for the Talk HPB
NEXTCLOUD_URL=

# Struktur AG-issued Customer ID to get access to apt repositories
CUSTOMER_ID=
####

SYSTEM_USER=usrv

NETWORK_INTERFACE=eth0

hostnamectl set-hostname ${MACHINE_HOSTNAME}

# Print some information about the container OS
hostnamectl

# Print some information about the container timezone
timedatectl

#####################################################################
## Get the IP address into an environment variable. This command outputs 
## an empty variable if the network interface name is not ${NETWORK_INTERFACE}
#####################################################################
ip_address=`ip -4 addr show ${NETWORK_INTERFACE} | grep -oP '(?<=inet\s)\d+(\.\d+){3}'`

adduser --disabled-password --gecos GECOS ${SYSTEM_USER}
 
usermod -p "`openssl passwd -1  -salt 5RPVAd ${SYSTEM_USER}`" ${SYSTEM_USER}
 
adduser ${SYSTEM_USER} sudo

apt update

apt install -y ca-certificates wget nginx curl gnupg2

wget -O/tmp/sign.pub https://packages.struktur.de/nextcloud/spreed/${CUSTOMER_ID}/struktur-ag-deb-sign-1.pub

apt-key add /tmp/sign.pub

cp /vagrant/artifacts/nextcloud-spreed-repository.list /etc/apt/sources.list.d/

apt update

apt install -y  nextcloud-spreed-services-full

cp /vagrant/artifacts/nextcloud-spreed-signaling-server.conf /etc/nextcloud-spreed-signaling/server.conf

sed -i "s|#NEXTCLOUD_URL#|${NEXTCLOUD_URL}|g" /etc/nextcloud-spreed-signaling/server.conf

SECRET_KEY=`openssl rand -hex 32`

sed -i "s|#SECRET_KEY#|${SECRET_KEY}|g" /etc/nextcloud-spreed-signaling/server.conf

sed -i "s|#MACHINE_HOSTNAME#|${MACHINE_HOSTNAME}|g" /etc/nextcloud-spreed-signaling/server.conf

## Install the mkcert rootCA (see https://github.com/FiloSottile/mkcert#installing-the-ca-on-other-systems) 
chmod u+x /vagrant/artifacts/mkcert

export CAROOT=/vagrant/artifacts/

/vagrant/artifacts/mkcert -install

mkdir /etc/nginx/ssl/

/vagrant/artifacts/mkcert  --cert-file /etc/nginx/ssl/${MACHINE_HOSTNAME}.pem --key-file  /etc/nginx/ssl/${MACHINE_HOSTNAME}-key.pem "${MACHINE_HOSTNAME}"

cp /vagrant/artifacts/talk-hpb-signaling-nginx-site.conf /etc/nginx/sites-available/talk-hpb-signaling-nginx-site.conf

ln -s /etc/nginx/sites-available/talk-hpb-signaling-nginx-site.conf /etc/nginx/sites-enabled/talk-hpb-signaling-nginx-site.conf

sed -i "s|#MACHINE_HOSTNAME#|${MACHINE_HOSTNAME}|g" /etc/nginx/sites-available/talk-hpb-signaling-nginx-site.conf

rm /etc/nginx/sites-enabled/default

systemctl restart nextcloud-spreed-signaling

systemctl restart nginx

## Test the Signaling Server
curl -i https://${MACHINE_HOSTNAME}/standalone-signaling/api/v1/welcome

## Check the status of the main services
systemctl status janus

systemctl status nextcloud-spreed-signaling

systemctl status nginx

end_time=`date`

echo "This container has IP (interface: ${NETWORK_INTERFACE}): ${ip_address}"

echo "If you add this IP to the hostname (${MACHINE_HOSTNAME}) in your hosts file:"

echo "  The shared secret to be configured in the Nextcloud Talk UI is: ${SECRET_KEY}"

echo "	You can connect with user ${SYSTEM_USER} via ssh (password ${SYSTEM_USER}): ssh ${SYSTEM_USER}@${MACHINE_HOSTNAME}"

echo "provisioning started: ${start_time}" 
 
echo "provisioning ended: ${end_time}"