#!/usr/bin/env bash
# VPS Installer bootstrap script
# Usage:
#   curl -sSL https://your-host/bootstrap.sh | bash -s -- \
#     --ip 0.0.0.0 --port 8443 --login admin --password S3cur3Pass
set -euo pipefail

# ─── Defaults ────────────────────────────────────────────────────────────────

INSTALLER_IP=""
INSTALLER_PORT=""
INSTALLER_LOGIN=""
INSTALLER_PASSWORD=""
NO_TLS="false"
INSTALL_DIR="/opt/vps-installer"
BASE_URL="${INSTALLER_BASE_URL:-https://vps.myidb.ru/files}"

# ─── Argument parsing ────────────────────────────────────────────────────────

usage() {
  cat <<EOF
Usage: $0 [OPTIONS]

Required:
  --ip       IP address to listen on (e.g. 0.0.0.0 or specific IP)
  --port     Port to listen on (e.g. 8443)
  --login    Admin login
  --password Admin password

Optional:
  --no-tls   Disable TLS (plain HTTP, not recommended)
  --dir      Installation directory (default: /opt/vps-installer)

EOF
  exit 1
}

while [[ $# -gt 0 ]]; do
  case "$1" in
    --ip)       INSTALLER_IP="$2";       shift 2 ;;
    --port)     INSTALLER_PORT="$2";     shift 2 ;;
    --login)    INSTALLER_LOGIN="$2";    shift 2 ;;
    --password) INSTALLER_PASSWORD="$2"; shift 2 ;;
    --no-tls)   NO_TLS="true";           shift   ;;
    --dir)      INSTALL_DIR="$2";        shift 2 ;;
    -h|--help)  usage ;;
    *) echo "Unknown option: $1"; usage ;;
  esac
done

# All four parameters are required
if [ -z "$INSTALLER_IP" ] || [ -z "$INSTALLER_PORT" ] || \
   [ -z "$INSTALLER_LOGIN" ] || [ -z "$INSTALLER_PASSWORD" ]; then
  echo "ERROR: --ip, --port, --login, and --password are all required."
  echo ""
  usage
fi

# ─── Detect architecture ────────────────────────────────────────────────────

ARCH="$(uname -m)"
case "$ARCH" in
  x86_64)         BINARY_ARCH="amd64" ;;
  aarch64|arm64)  BINARY_ARCH="arm64" ;;
  *)
    echo "ERROR: Unsupported architecture: $ARCH"
    exit 1
  ;;
esac

BINARY_NAME="vps-installer-linux-${BINARY_ARCH}"

# ─── Download binary ─────────────────────────────────────────────────────────

if [ -z "$BASE_URL" ]; then
  BASE_URL="https://vps.myidb.ru/files"
fi

DOWNLOAD_URL="${BASE_URL%/}/${BINARY_NAME}"

echo "==> VPS Installer Bootstrap"
echo "    Arch:     $ARCH ($BINARY_ARCH)"
echo "    Listen:   $INSTALLER_IP:$INSTALLER_PORT"
echo "    TLS:      $([ "$NO_TLS" = "true" ] && echo 'disabled' || echo 'enabled (self-signed)')"
echo ""

mkdir -p "$INSTALL_DIR"
BINARY_PATH="$INSTALL_DIR/vps-installer"

echo "==> Downloading $BINARY_NAME ..."
if command -v curl &>/dev/null; then
  curl -fsSL "$DOWNLOAD_URL" -o "$BINARY_PATH"
elif command -v wget &>/dev/null; then
  wget -qO "$BINARY_PATH" "$DOWNLOAD_URL"
else
  echo "ERROR: Neither curl nor wget is available."
  exit 1
fi

chmod +x "$BINARY_PATH"
echo "    Saved to: $BINARY_PATH"

# ─── Launch ──────────────────────────────────────────────────────────────────

NOTLS_FLAG=""
[ "$NO_TLS" = "true" ] && NOTLS_FLAG="--no-tls"

# Detect public IP for display if binding to 0.0.0.0
DISPLAY_IP="$INSTALLER_IP"
if [ "$INSTALLER_IP" = "0.0.0.0" ]; then
  DISPLAY_IP="$(ip -4 route get 8.8.8.8 2>/dev/null | grep -oP 'src \K\S+' || echo '<your-server-ip>')"
fi

PROTO="https"
[ "$NO_TLS" = "true" ] && PROTO="http"

echo ""
echo "==> Starting VPS Installer..."
echo ""
echo "    ┌─────────────────────────────────────────────────────┐"
echo "    │  Open in browser:                                   │"
echo "    │  ${PROTO}://${DISPLAY_IP}:${INSTALLER_PORT}/                     │"
echo "    │                                                     │"
if [ "$NO_TLS" = "false" ]; then
  echo "    │  NOTE: Accept the self-signed TLS certificate       │"
  echo "    │        warning in your browser (one-time).          │"
  echo "    │                                                     │"
fi
echo "    │  Press Ctrl+C to stop the installer.                │"
echo "    └─────────────────────────────────────────────────────┘"
echo ""

exec "$BINARY_PATH" \
  --ip "$INSTALLER_IP" \
  --port "$INSTALLER_PORT" \
  --login "$INSTALLER_LOGIN" \
  --password "$INSTALLER_PASSWORD" \
  $NOTLS_FLAG