#!/bin/bash
set -e

# ============================================
# ProxCenter Community Installation Script
# ============================================
# Usage: curl -fsSL https://proxcenter.io/install/community | sudo bash
# ============================================

# Colors
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
CYAN='\033[0;36m'
BOLD='\033[1m'
DIM='\033[2m'
NC='\033[0m'

# Configuration
INSTALL_DIR="/opt/proxcenter"
COMPOSE_URL="https://raw.githubusercontent.com/adminsyspro/proxcenter-ui/main/docker-compose.community.yml"
FRONTEND_IMAGE="ghcr.io/adminsyspro/proxcenter-frontend:latest"

TOTAL_STEPS=4
START_TIME=$(date +%s)

# ============================================
# Helper Functions
# ============================================

step() {
    local step_num=$1
    local msg=$2
    echo ""
    echo -e "${BOLD}${BLUE}[$step_num/$TOTAL_STEPS]${NC} ${BOLD}$msg${NC}"
}

log_info() {
    echo -e "    ${DIM}$1${NC}"
}

log_success() {
    echo -e "    ${GREEN}✓${NC} $1"
}

log_warning() {
    echo -e "    ${YELLOW}!${NC} $1"
}

log_error() {
    echo -e "\n    ${RED}✗ $1${NC}"
    exit 1
}

spinner() {
    local pid=$1
    local msg=${2:-"Please wait"}
    local chars="⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏"
    local i=0
    tput civis 2>/dev/null || true
    while kill -0 "$pid" 2>/dev/null; do
        printf "\r    ${DIM}%s %s${NC}" "${chars:i++%${#chars}:1}" "$msg"
        sleep 0.1
    done
    printf "\r\033[K"
    tput cnorm 2>/dev/null || true
}

format_duration() {
    local secs=$1
    if [ "$secs" -lt 60 ]; then
        echo "${secs}s"
    else
        echo "$((secs / 60))m $((secs % 60))s"
    fi
}

cleanup_on_error() {
    echo ""
    echo -e "${RED}${BOLD}Installation failed.${NC}"
    echo -e "${DIM}    Logs may help diagnose the issue:${NC}"
    echo -e "${DIM}    - Check Docker: docker compose -f $INSTALL_DIR/docker-compose.yml logs${NC}"
    echo -e "${DIM}    - Re-run this script to retry${NC}"
    echo ""
    tput cnorm 2>/dev/null || true
    exit 1
}

trap cleanup_on_error ERR

print_banner() {
    echo ""
    echo -e "${CYAN}${BOLD}"
    cat << 'BANNER'
    ____                 ____           _
   |  _ \ _ __ _____  __/ ___|___ _ __ | |_ ___ _ __
   | |_) | '__/ _ \ \/ / |   / _ \ '_ \| __/ _ \ '__|
   |  __/| | | (_) >  <| |__|  __/ | | | ||  __/ |
   |_|   |_|  \___/_/\_\\____\___|_| |_|\__\___|_|
BANNER
    echo -e "${NC}"
    echo -e "    ${GREEN}${BOLD}Community Edition${NC}  ${DIM}— Free & Open Source${NC}"
    echo ""
}

# ============================================
# Pre-flight Checks
# ============================================

preflight_checks() {
    if [ "$EUID" -ne 0 ]; then
        log_error "This script must be run as root. Use: sudo bash install-community.sh"
    fi

    if [ -f /etc/os-release ]; then
        . /etc/os-release
        OS=$ID
        OS_VERSION_ID=$VERSION_ID
    elif [ -f /etc/debian_version ]; then
        OS="debian"
    elif [ -f /etc/redhat-release ]; then
        OS="rhel"
    else
        log_error "Unsupported operating system"
    fi

    case $OS in
        ubuntu|debian)
            PKG_MANAGER="apt-get"
            PKG_UPDATE="apt-get update"
            PKG_INSTALL="apt-get install -y"
            ;;
        centos|rhel|rocky|almalinux|fedora)
            PKG_MANAGER="dnf"
            PKG_UPDATE="dnf check-update || true"
            PKG_INSTALL="dnf install -y"
            ;;
        *)
            log_error "Unsupported OS: $OS"
            ;;
    esac

    log_info "OS: $OS $OS_VERSION_ID"
}

# ============================================
# Step 1: Install Docker
# ============================================

install_docker() {
    step 1 "Installing Docker"

    $PKG_UPDATE > /dev/null 2>&1 || true

    if command -v docker &> /dev/null; then
        local docker_version
        docker_version=$(docker --version | grep -oP '\d+\.\d+\.\d+' | head -1)
        log_success "Docker $docker_version already installed"
        return
    fi

    log_info "Installing dependencies..."
    $PKG_INSTALL ca-certificates curl openssl > /dev/null 2>&1

    case $OS in
        ubuntu|debian)
            apt-get remove -y docker docker-engine docker.io containerd runc > /dev/null 2>&1 || true
            $PKG_INSTALL gnupg lsb-release > /dev/null 2>&1
            install -m 0755 -d /etc/apt/keyrings
            curl -fsSL https://download.docker.com/linux/$OS/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg 2>/dev/null
            chmod a+r /etc/apt/keyrings/docker.gpg
            echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/$OS $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
            apt-get update > /dev/null 2>&1
            $PKG_INSTALL docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin > /dev/null 2>&1
            ;;
        centos|rhel|rocky|almalinux|fedora)
            dnf remove -y docker docker-client docker-client-latest docker-common docker-latest docker-latest-logrotate docker-logrotate docker-engine > /dev/null 2>&1 || true
            $PKG_INSTALL dnf-plugins-core > /dev/null 2>&1
            dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo > /dev/null 2>&1
            $PKG_INSTALL docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin > /dev/null 2>&1
            ;;
    esac

    systemctl start docker
    systemctl enable docker > /dev/null 2>&1

    log_success "Docker installed"
}

# ============================================
# Step 2: Configure ProxCenter
# ============================================

setup_proxcenter() {
    step 2 "Configuring ProxCenter"

    mkdir -p "$INSTALL_DIR"
    cd "$INSTALL_DIR"

    curl -fsSL "$COMPOSE_URL" -o docker-compose.yml 2>/dev/null

    # Mark volumes as external
    sed -i '/^volumes:/,$d' docker-compose.yml
    cat >> docker-compose.yml << 'VOLUMES'
volumes:
  proxcenter_data:
    external: true
VOLUMES

    log_success "Downloaded compose configuration"

    # Generate secrets
    APP_SECRET=$(openssl rand -hex 32)
    NEXTAUTH_SECRET=$(openssl rand -hex 32)

    SERVER_IP=$(hostname -I | awk '{print $1}' | head -1)
    if [ -z "$SERVER_IP" ]; then
        SERVER_IP="localhost"
    fi

    cat > "$INSTALL_DIR/.env" << EOF
# ProxCenter Community Edition
# Generated on $(date -Iseconds)

APP_SECRET=$APP_SECRET
NEXTAUTH_SECRET=$NEXTAUTH_SECRET
NEXTAUTH_URL=http://$SERVER_IP:3000
VERSION=latest
EOF

    chmod 600 "$INSTALL_DIR/.env"
    log_success "Secrets generated and configuration saved"
}

# ============================================
# Step 3: Pull & Initialize
# ============================================

pull_and_init() {
    step 3 "Pulling image and initializing"

    cd "$INSTALL_DIR"

    docker compose pull 2>&1 | tail -3
    log_success "Image pulled"

    docker volume create proxcenter_data > /dev/null 2>&1 || true

    # Init data directory — bypass entrypoint to avoid warning
    docker run --rm --user root --entrypoint "" \
        -v proxcenter_data:/app/data \
        "$FRONTEND_IMAGE" \
        sh -c "mkdir -p /app/data && chown -R 1001:1001 /app/data" > /dev/null 2>&1

    # Run Prisma migrations — bypass entrypoint
    docker run --rm --entrypoint "" \
        -v proxcenter_data:/app/data \
        -e DATABASE_URL="file:/app/data/proxcenter.db" \
        "$FRONTEND_IMAGE" \
        sh -c "prisma db push --schema /app/prisma/schema.migrate.prisma --accept-data-loss --skip-generate" > /dev/null 2>&1 || true

    log_success "Database initialized"
}

# ============================================
# Step 4: Start Services
# ============================================

start_and_wait() {
    step 4 "Starting ProxCenter"

    cd "$INSTALL_DIR"
    docker compose up -d 2>&1 | grep -v "^$"
    log_success "Container started"

    log_info "Waiting for service to be ready..."

    (
        attempt=1
        while [ $attempt -le 60 ]; do
            if curl -s -f http://localhost:3000/api/health > /dev/null 2>&1; then
                exit 0
            fi
            sleep 2
            attempt=$((attempt + 1))
        done
        exit 1
    ) &
    local wait_pid=$!
    spinner $wait_pid "Starting frontend..."
    wait $wait_pid || log_error "Frontend failed to start within 2 minutes. Check: docker compose logs"

    log_success "Service healthy"
}

# ============================================
# Final Summary
# ============================================

print_summary() {
    local end_time=$(date +%s)
    local duration=$((end_time - START_TIME))

    SERVER_IP=$(hostname -I | awk '{print $1}' | head -1)

    echo ""
    echo -e "${GREEN}${BOLD}  ┌─────────────────────────────────────────────┐${NC}"
    echo -e "${GREEN}${BOLD}  │      ProxCenter Community is ready!         │${NC}"
    echo -e "${GREEN}${BOLD}  └─────────────────────────────────────────────┘${NC}"
    echo ""
    echo -e "    ${BOLD}URL${NC}         ${CYAN}http://$SERVER_IP:3000${NC}"
    echo -e "    ${BOLD}Install${NC}     $INSTALL_DIR"
    echo -e "    ${BOLD}Duration${NC}    $(format_duration $duration)"
    echo ""
    echo -e "    ${DIM}Features: Dashboard, Inventory, VM/CT Management, Backups, Storage${NC}"
    echo ""
    echo -e "    ${YELLOW}${BOLD}Upgrade to Enterprise for:${NC}"
    echo -e "    ${DIM}DRS, RBAC & LDAP, Advanced Monitoring, AI Insights, and more${NC}"
    echo -e "    ${CYAN}https://proxcenter.io/pricing${NC}"
    echo ""
    echo -e "    ${DIM}Manage:${NC}"
    echo -e "      ${DIM}cd $INSTALL_DIR && docker compose logs -f${NC}     ${DIM}# Logs${NC}"
    echo -e "      ${DIM}cd $INSTALL_DIR && docker compose down${NC}        ${DIM}# Stop${NC}"
    echo -e "      ${DIM}cd $INSTALL_DIR && docker compose pull &&${NC}"
    echo -e "      ${DIM}docker compose up -d${NC}                          ${DIM}# Update${NC}"
    echo ""
}

# ============================================
# Main
# ============================================

main() {
    print_banner
    preflight_checks

    install_docker
    setup_proxcenter
    pull_and_init
    start_and_wait

    print_summary
}

main "$@"