#!/bin/bash

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'

set -e
# Directory to save dcomms config files in
DCOMMS_DIR=$PWD

COMPOSE_FILES="-f ./conf/compose/docker-compose.yml "

# Docker saved file names
FILES=(
    "dcomms_conf_v2.tar" # If we can grab the install script we can likely grab the configs.
    "caddy_2.6.4.tar"
)

D_IMAGES=("caddy:2.6.4")


DCOMMS_INSTANCES=(
    "kyiv.dcomm.net.ua"
    "odessa.dcomm.net.ua"
    "kharkiv.dcomm.net.ua"
    "lviv.dcomm.net.ua"
    "lviv2.dcomm.net.ua"
    "rivne.dcomm.net.ua"
    "kherson.dcomm.net.ua"
    "mykolayiv.dcomm.net.ua"
)

IPFS_GATEWAYS=(
    "ipfs.io/ipfs"
    "cf-ipfs.com/ipfs"
    "gateway.ipfs.io/ipfs"
    "cloudflare-ipfs.com/ipfs"
    "ipfs.best-practice.se/ipfs"
    "ipfs.2read.net/ipfs"
)

IPFS_DIR="QmbCFPd8ACTicxQsuDyUfm1C1jMwveocdVDn2K3nruaaVF"

#List of trackers for generating the magnet link, only use this once to save on space
MAG_TRACKERS="&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2810%2Fannounce&tr=udp%3A%2F%2Fopen.tracker.cl%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2Fopentracker.i2p.rocks%3A6969%2Fannounce&tr=https%3A%2F%2Fopentracker.i2p.rocks%3A443%2Fannounce&tr=udp%3A%2F%2Fwww.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.dler.org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftr.cili001.com%3A8070%2Fannounce&tr=udp%3A%2F%2Fipv4.tracker.harry.lu%3A80%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt.oiyo.tk%3A6969%2Fannounce&tr=https%3A%2F%2Ftracker.nanoha.org%3A443%2Fannounce&tr=https%3A%2F%2Ftracker.logirl.moe%3A443%2Fannounce&tr=https%3A%2F%2Ftracker.lilithraws.org%3A443%2Fannounce"

#Big ugly blob of links. Yikes
MAGNET_LINKS=(
	"magnet:?xt=urn:btih:806E6EA23B5098BB112B1C1EA6ACF1D4E374C1D8&dn=dcomms_conf_v2.tar"
	#"magnet:?xt=urn:btih:F1A024E0878324F3749193A28DE6C4C33252E670&dn=caddy_2.6.2.tar"
	"magnet:?xt=urn:btih:9F004AEF55ECE1DF2908F6FA33C7FC7CDD5EEE43&dn=ceno-client_latest.tar"
	"magnet:?xt=urn:btih:A8865661D17C7C1669738DE3892A245CBFE0B384&dn=deltachat-mailadm-dovecot_v0.0.1.tar"
	"magnet:?xt=urn:btih:15DC00304F12941B9DC03103ABE70FA27D4FDB1A&dn=deltachat-mailadm-postfix_v0.0.3.tar"
	"magnet:?xt=urn:btih:0DB1E810B538AE6B73C12F20461D8D90ADAE4372&dn=deltachat-mailadm_v0.0.1.tar"
	#"magnet:?xt=urn:btih:DD660DDCE77DBEBB3CBCDDE45600203DAD5FE488&dn=element-web_v1.11.17.tar"
	#"magnet:?xt=urn:btih:63C98AC0E0F799AEC65D6C6B4005E3748068A339&dn=mastodon_v4.1.0.tar"
	"magnet:?xt=urn:btih:5D74122C024622B2E02DE5D852A17D5C22C2C28F&dn=maubot_v0.3.1.tar"
	"magnet:?xt=urn:btih:824829D5F526A82C7209160C3E709B4BA6624442&dn=postgres_14-alpine.tar"
	"magnet:?xt=urn:btih:4EEDD83F3DD76489F3AB70F07035CDE5B87C0A65&dn=redis_7.0-alpine.tar"
	#"magnet:?xt=urn:btih:24116174AF54EC4DD47015E634F3DB1B6B2A9DA3&dn=synapse_v1.74.0.tar"
)


FILE_MAGNETS=(
    "${MAGNET_LINKS[0]}$MAG_TRACKERS"
    "${MAGNET_LINKS[1]}$MAG_TRACKERS"
)

CONF_MAGNET=""
#CONF_MAGNET="$MAG_TRACKERS"

export HUB_REACHABLE=false
export DCOMM_REACHABLE=false
export IPFS_REACHABLE=false
export TOR_AVAIL=false
i=0

echo "This script requires root access to interact with Docker. Please enter your password if prompted."
sudo echo ""

#This funciton uses which to discover what packages are installed on this system.
#Should investigate which command has the most interoperability
check_requirements () {
    if ! which curl docker >/dev/null; then
        printf "${RED}## This script depends on curl and docker.\n"
        printf "Please install 'curl' and/or install docker.\n"
        printf "https://docs.docker.com/engine/install/${NC}\n"
        exit 1
    fi
    if ! which aria2c>/dev/null; then
        printf "${YELLOW}## This script requires aria2 to download torrents in "
        printf "the event that Docker Hub or the dComms servers are unreachable.\n"
        printf "If you require this functionality please install 'aria2'${NC}\n"
        TORRENT_AVAIL=false
        ((i=i+=1))
    else
        TORRENT_AVAIL=true
    fi
    if which tor >/dev/null; then
        TOR_AVAIL=true
    else
        printf "${YELLOW}## This script can take advantage of Tor to route around "
        printf "blockages and allow users to connect anonymously to your server.\n"
        printf "If you would like this functionality enabled please install 'tor'"
	printf "from your package manager and re-run the script.${NC}\n"
    fi
}

detect_connectivity () {
    # This function tests all available means to retrieve the dComms repository.
    if  sudo docker pull hello-world >/dev/null 2>&1; then
        sudo docker rmi hello-world >/dev/null 2>&1
        printf "${GREEN}## Successfully connected to Docker Hub${NC}\n"
        HUB_REACHABLE=true
    else
        printf "${RED}## Unable to connect to Docker Hub${NC}\n"
        ((i=i+=1))
    fi

    for site in ${DCOMMS_INSTANCES[@]}; do
        #this function should be more complex
        if curl -s -m 3 https://$site/dcomms/hashes.txt -o /tmp/dcomms; then
            if (( $(stat -c %s /tmp/dcomms) > 3 )); then
                DCOMM_URL=https://$site/dcomms
                printf "${GREEN}## Successfully connected to $site${NC}\n"
                DCOMM_REACHABLE=true
                rm /tmp/dcomms
                break
            fi
            rm /tmp/dcomms
        fi
    done

    if [[ "${DCOMM_REACHABLE}" == false ]]; then
        printf "${RED}## Unable to connect to dComms instance${NC}\n"
        ((i=i+=1))
    fi

    for site in ${IPFS_GATEWAYS[@]}; do
        #this function should be more complex
        if curl -s -m 30 https://$site/$IPFS_DIR/hashes.txt -o /tmp/dcomms; then
            if (( $(stat -c %s /tmp/dcomms) > 3 )); then
                IPFS_URL=https://$site/$IPFS_DIR
                printf "${GREEN}## Successfully connected to $site${NC}\n"
                IPFS_REACHABLE=true
                rm /tmp/dcomms
                break
            fi
            rm /tmp/dcomms
        fi
    done

    if [[ "${IPFS_REACHABLE}" == false ]]; then
        printf "${RED}## Unable to connect to IPFS gateway${NC}\n"
        ((i=i+=1))
    fi

    # 'i' is the number of failed methods. Change as needed
    if (( i == 4 )); then
        printf "\n\n${RED}## All methods of retrieving dComms docker images have failed\n"
        printf "## Don't despair!\n"
        printf "## If you manage to retrieve tarfiles of the images listed below\n"
      	printf "## place them in the $DCOMMS_DIR folder and re-run this script.\n"
        for i in ${D_IMAGES[@]}; do
             printf "$i\n"
        done
	printf "${NC}"
        exit 1
    fi

}

#Spins up a temporary docker container to generate synapse config files and keys
matrix_config () {
    printf "${YELLOW}## Generating synapse config${NC}\n"
    sudo docker run -it --rm \
        --mount type=bind,src=$(readlink -f $DCOMMS_DIR/conf/synapse),dst=/data \
        -e SYNAPSE_SERVER_NAME=matrix.$DWEB_DOMAIN \
        -e SYNAPSE_REPORT_STATS=no \
        -e SYNAPSE_DATA_DIR=/data \
    matrixdotorg/synapse:v1.80.0 generate 2>/dev/null
    sudo chown -R $USER:$USER $DCOMMS_DIR/conf/synapse/

    sed -i -z "s/database.*homeserver.db//" $DCOMMS_DIR/conf/element/config.json
    sed -i "s/# vim:ft=yaml//" $DCOMMS_DIR/conf/element/config.json

    printf "enable_registration: true\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "registration_requires_token: true\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "encryption_enabled_by_default_for_room_type: all\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "rc_registration:\n  per_second: 0.1 \n  burst_count: 2\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "presence:\n  enabled: false\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "database:\n  name: psycopg2\n  txn_limit: 10000\n  args:\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "    user: synapse\n    password: null\n    database: synapse\n    host: localhost\n" >> $DCOMMS_DIR/conf/element/config.json
    printf "    port: 5432\n    cp_min: 5\n    cp_max: 10\n" >> $DCOMMS_DIR/conf/element/config.json

    sed -i "s/TEMPLATE/$DWEB_DOMAIN/" $DCOMMS_DIR/conf/element/config.json
}

#Mastodon's config file requires a number of keys to be generated. We spin up a temporary container to do this.
#Volume must be removed before running
mastodon_config () {
    sudo docker volume rm masto_data_tmp 2> /dev/null || true
    printf "${YELLOW}## Generating mastodon config${NC}\n"
    sudo cp -a $DCOMMS_DIR/conf/mastodon/example.env.production $DCOMMS_DIR/conf/mastodon/env.production
    SECRET_KEY_BASE=`sudo docker run -it --rm \
        --mount type=volume,src=masto_data_tmp,dst=/opt/mastodon \
            -e RUBYOPT=-W0 tootsuite/mastodon:v4.2.9 \
        bundle exec rake secret` >/dev/null

    OTP_SECRET=$(sudo docker run -it --rm \
        --mount type=volume,src=masto_data_tmp,dst=/opt/mastodon \
            -e RUBYOPT=-W0 tootsuite/mastodon:v4.2.9 \
        bundle exec rake secret) >/dev/null

    VAPID_KEYS=$(sudo docker run -it --rm \
        --mount type=volume,src=masto_data_tmp,dst=/opt/mastodon \
            -e RUBYOPT=-W0 tootsuite/mastodon:v4.2.9 \
        bundle exec rake mastodon:webpush:generate_vapid_key)>/dev/null
    VAPID_FRIENDLY_KEYS=${VAPID_KEYS//$'\n'/\\$'\n'}

    #REDIS_PW=$(openssl rand -base64 12)

    sed -i "s/REPLACEME/$DWEB_DOMAIN/" $DCOMMS_DIR/conf/mastodon/env.production
    sed -i "s/SECRET_KEY_BASE=/&$SECRET_KEY_BASE/" $DCOMMS_DIR/conf/mastodon/env.production
    sed -i "s/OTP_SECRET=/&$OTP_SECRET/" $DCOMMS_DIR/conf/mastodon/env.production
    sed -i "s/VAPID_KEYS=/$VAPID_FRIENDLY_KEYS/" $DCOMMS_DIR/conf/mastodon/env.production
    sed -i 's/\r$//g' $DCOMMS_DIR/conf/mastodon/env.production
    sed -i "s/ALTERNATE_DOMAINS=social./&$DWEB_ONION/" $DCOMMS_DIR/conf/mastodon/env.production
    sed -i "s/SMTP_SERVER=/&$DWEB_DOMAIN/" $DCOMMS_DIR/conf/mastodon/env.production
    #sed -i "s/REDIS_PASSWORD=/&$REDIS_PW/" $DCOMMS_DIR/conf/mastodon/env.production
    
    printf "${YELLOW}## Initializing mastodon database${NC}\n"
    
    docker compose -f ./conf/compose/mastodon.docker-compose.yml run --rm mastodon-web bundle exec rake db:prepare
    docker compose -f ./conf/compose/mastodon.docker-compose.yml run --rm mastodon-web bundle exec rake db:migrate

    docker volume rm -f masto_data_tmp
}

mau_config () {
    printf "${YELLOW}## Generating mau bot config${NC}\n"
    sudo docker run --rm --mount type=bind,src=$(readlink -f $DCOMMS_DIR/conf/mau),dst=/data dock.mau.dev/maubot/maubot:v0.3.1 1>&2  >/dev/null
    sudo chown -R $USER:$USER $DCOMMS_DIR/conf/mau 
    MAU_PW=$(tr -dc 'A-Za-z0-9' < /dev/urandom | head -c 18)
    printf "${RED}## Mau credentials = admin:$MAU_PW${NC}\n"
    MAU_CREDS="admin:$MAU_PW"
    sed -i "s/admins:/&\n  admin: $MAU_PW/" $DCOMMS_DIR/conf/mau/config.yaml
}   

grab_files () {
    j=0
    for file in ${FILES[@]}; do
        if [ -f $DCOMMS_DIR/images/$file ]; then
            printf "${GREEN}$file found on disk.${NC}\n"
        elif [[ "${DCOMM_REACHABLE}" == true ]]; then
            printf "${GREEN}Downloading $file using Dcomm mirror.${NC}\n"
            curl $DCOMM_URL/$file -o $TMP_DIR_F/$file
        elif [[ "${IPFS_REACHABLE}" == true ]]; then
            printf "${GREEN}Downloading $file using IPFS.${NC}\n"
            curl $IPFS_URL/$file -o $TMP_DIR_F/$file
        elif [[ "${TORRENT_AVAIL}" == true ]]; then
            printf "${GREEN}Downloading $file using torrent.${NC}\n"
            aria2c -d $TMP_DIR_F/$file --seed-time=0 "${FILE_MAGNETS[$j]}" >/dev/null
        fi
        if (( j == 0 )); then
            echo ""
	    tar -xvf $TMP_DIR_F/$file -C $DCOMMS_DIR >/dev/null    
        else
            mv $TMP_DIR_F/$file $DCOMMS_DIR/images/$file
        fi
        ((j=j+=1))
    done
}

#The main function does most of the configuration
main() {
    if [ -z $DCOMMS_DIR ]; then
        printf "${RED}No directory set for dcomms files.\nPlease edit the "
        printf "'DCOMMS_DIR' variable at the top of this script and run again.${NC}\n"
        exit 1
    elif [ -f $DCOMMS_DIR/run.sh ]; then # || [ -d $DCOMMS_DIR/conf/ ]; then
        printf "${RED}A previous installation of dcomms was found on this system.\n"
        printf "To start your services please use 'run.sh' in '$DCOMMS_DIR'.${NC}\n"
        exit 1
    fi

    export NEWT_COLORS='
    root=,black
    checkbox=,black
    entry=,black
    '
    export DELTA=false
    export MATRIX=false
    export CENO=false
    export MAU=false
    export MASTO=false
    check_requirements

    DWEB_DOMAIN=$(whiptail --inputbox "What domain would you like to use?" 8 39 --title "Domain Name" 3>&1 1>&2 2>&3)
    exitstatus=$?
    if [ $exitstatus = 1 ]; then
        printf "${RED}Exiting${NC}\n"
        exit 1
    elif [[ -z "${DWEB_DOMAIN}" ]]; then
        printf "${RED}This script requires a domain name to function.\n"
        printf "${RED}Exiting${NC}\n"
        exit 1
    fi

    export DWEB_DOMAIN=$DWEB_DOMAIN
    # Replace dots with dashes
    export DWEB_FRIENDLY_DOMAIN="${DWEB_DOMAIN//./_}"

    CHOICES=$(whiptail --separate-output --checklist "Which services would you like?" 10 35 5 \
      "1" "Delta Chat" ON \
      "2" "Element & Synapse" ON \
      "3" "Ceno Bridge" ON \
      "4" "Maubot" OFF \
      "5" "Mastodon" OFF 3>&1 1>&2 2>&3)

    if [ -z "$CHOICES" ]; then
      echo "No option was selected (user hit Cancel or unselected all options)"
      exit
    else
      for CHOICE in $CHOICES; do
        case "$CHOICE" in
        "1")
            D_IMAGES+=("keith/deltachat-mailadm-postfix:v0.0.3" "keith/deltachat-mailadm-dovecot:v0.0.1" "keith/deltachat-mailadm:v0.0.1")
            FILES+=("deltachat-mailadm-dovecot_v0.0.1.tar" "deltachat-mailadm_v0.0.1.tar" "deltachat-mailadm-postfix_v0.0.3.tar")
            FILE_MAGNETS+=("${MAGNET_LINKS[3]}$MAG_TRACKERS" "${MAGNET_LINKS[5]}$MAG_TRACKERS" "${MAGNET_LINKS[4]}$MAG_TRACKERS")
            COMPOSE_FILES+="-f ./conf/compose/delta.docker-compose.yml "
            DELTA=true
          ;;
        "2")
            D_IMAGES+=("vectorim/element-web:v1.11.40" "matrixdotorg/synapse:v1.110.0")
            FILES+=("synapse_v1.80.0.tar" "element-web_v1.11.26.tar")
            FILE_MAGNETS+=("${MAGNET_LINKS[11]}$MAG_TRACKERS" "${MAGNET_LINKS[6]}$MAG_TRACKERS")
            COMPOSE_FILES+="-f ./conf/compose/element.docker-compose.yml "
            MATRIX=true
          ;;
        "3")
            D_IMAGES+=("equalitie/ceno-client:v0.21.2")
            FILES+=("ceno-client_v0.21.2.tar")
            FILE_MAGNETS+=("${MAGNET_LINKS[2]}$MAG_TRACKERS")
            COMPOSE_FILES+="-f ./conf/compose/bridge.docker-compose.yml "
            CENO=true
          ;;
        "4")
            D_IMAGES+=("dock.mau.dev/maubot/maubot:v0.3.1")
            FILES+=("maubot_v0.3.1.tar")
            FILE_MAGNETS+=("${MAGNET_LINKS[8]}$MAG_TRACKERS")
            COMPOSE_FILES+="-f ./conf/compose/mau.docker-compose.yml "
            MAU=true
          ;;
        "5")
            D_IMAGES+=("tootsuite/mastodon:v4.2.9" "redis:7.0-alpine" "postgres:14-alpine")
            FILES+=("mastodon_4.1.2.tar" "postgres_14.tar" "redis_7.0.tar")
            FILE_MAGNETS+=("${MAGNET_LINKS[7]}$MAG_TRACKERS" "${MAGNET_LINKS[9]}$MAG_TRACKERS" "${MAGNET_LINKS[10]}$MAG_TRACKERS")
            COMPOSE_FILES+="-f ./conf/compose/mastodon.docker-compose.yml "
            MASTO=true
          ;;
        *)
          echo "Unsupported item $CHOICE!" >&2
          exit 1
          ;;
        esac
      done
    fi

    TMP_DIR_F=$(mktemp -d)    

    trap 'rm -rf "$TMP_DIR_C"' EXIT 

    if [[ "${MAU}" == true ]] && [[ "${MATRIX}" == false ]]; then
        print "${RED}##Mau is a Matrix bot. You must install Matrix as well.${NC}\n"
        exit
    fi

    if [[ "${TOR_AVAIL}" == true ]]; then
        DWEB_ONION=$(whiptail --inputbox "Add a hidden service address (Optional)" 8 44 --title "HS Address" 3>&1 1>&2 2>&3)
        export DWEB_ONION=$DWEB_ONION
    fi

    detect_connectivity

    mkdir -p $DCOMMS_DIR/images
    if [[ "${HUB_REACHABLE}" == true ]]; then
        di=1
        printf "${GREEN}### Grabbing images from Docker Hub.${NC}\n"
        for img in ${D_IMAGES[@]}; do
            echo "dimg = $img"
            if sudo docker pull $img; then
                unset 'FILES[$di]'
                ((di=di+=1))
            fi
           
        done
    fi
    grab_files

    #Might be wise to bring this out of this function so that we can validate before loading
#    for f in $DCOMMS_DIR/images/*.tar; do
#        echo ""
#        cat $f | sudo docker load
#    done

    echo "#!/bin/bash" > $DCOMMS_DIR/run.sh
    if [[ "${MATRIX}" == true ]]; then
        matrix_config
    fi
    if [[ "${MAU}" == true ]]; then
        mau_config
 	echo 'echo "Mau credentials = '${MAU_CREDS}'"' >> $DCOMMS_DIR/run.sh
    fi
    if [[ "${MASTO}" == true ]]; then
        mastodon_config
    fi
    echo "sudo DWEB_ONION=$DWEB_ONION DWEB_DOMAIN=$DWEB_DOMAIN DWEB_FRIENDLY_DOMAIN=$DWEB_FRIENDLY_DOMAIN docker compose $COMPOSE_FILES up -d" >> $DCOMMS_DIR/run.sh
    chmod +x $DCOMMS_DIR/run.sh
    printf "${GREEN} dComms succesfully installed! Start your services by running 'run.sh' in $DCOMMS_DIR.${NC}\n"
}

main