#!/usr/bin/env bash
# frps-manager one-shot deploy script.
# Installs frps + frps-manager as systemd services on a Debian/Ubuntu or RHEL box.
# Run as root (or with sudo).
#
# Usage: sudo bash scripts/deploy.sh [--dry-run] [--no-systemd] [--dev]
# What it does:
#   1. Detects distro + package manager, installs system deps
#   2. Downloads the latest stable frps binary if runtime/bin/frps is missing
#   3. Creates a Python venv, installs requirements
#   4. Initializes the SQLite database
#   5. Generates a default frps.ini (admin user, default tenant, bindPort 7000)
#   6. Installs + starts systemd services (frps + frps-manager on :5390)

set -euo pipefail

DRY_RUN=0
NO_SYSTEMD=0
DEV=0
for arg in "$@"; do
  case "$arg" in
    --dry-run) DRY_RUN=1 ;;
    --no-systemd) NO_SYSTEMD=1 ;;
    --dev) DEV=1 ;;
    -h|--help)
      grep '^#' "$0" | sed 's/^# \?//'
      exit 0 ;;
  esac
done

PROJECT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "$PROJECT_DIR"

log() { echo "[deploy] $*"; }
die() { echo "[deploy][FATAL] $*" >&2; exit 1; }

# --- distro detection -------------------------------------------------------
if [ -f /etc/os-release ]; then
  . /etc/os-release
  OS_ID="$ID"
  OS_VER="$VERSION_ID"
else
  die "Cannot detect /etc/os-release"
fi
case "$OS_ID" in
  ubuntu|debian|raspbian) PKG=apt; SUDO=sudo ;;
  centos|rhel|rocky|almalinux|opencloudos|openanolis) PKG=yum; SUDO=sudo ;;
  fedora) PKG=dnf; SUDO=sudo ;;
  *)
    log "Unknown distro $OS_ID — assuming apt-compatible"
    PKG=apt; SUDO=sudo ;;
esac
[ "$(id -u)" -eq 0 ] && SUDO=""

log "Detected: $OS_ID $OS_VER (pkg manager: $PKG)"

# --- frps download ----------------------------------------------------------
if [ ! -x runtime/bin/frps ]; then
  log "frps binary missing — fetching v0.70.1 from GitHub"
  if [ "$DRY_RUN" = 1 ]; then
    log "DRY: would download frp_0.70.1_linux_amd64.tar.gz"
  else
    TMPDIR=$(mktemp -d)
    trap "rm -rf $TMPDIR" EXIT
    ARCH="$(uname -m)"
    case "$ARCH" in
      x86_64) FRPS_ARCH=amd64 ;;
      aarch64|arm64) FRPS_ARCH=arm64 ;;
      armv7l|armv7) FRPS_ARCH=arm ;;
      *) die "Unsupported arch: $ARCH (please build/download frps manually)" ;;
    esac
    URL="https://github.com/fatedier/frp/releases/download/v0.70.1/frp_0.70.1_linux_${FRPS_ARCH}.tar.gz"
    log "Downloading $URL"
    curl -fSL --max-time 120 -o "$TMPDIR/frp.tgz" "$URL" \
      || die "Failed to download frps"
    tar xzf "$TMPDIR/frp.tgz" -C "$TMPDIR"
    mkdir -p runtime/bin
    cp "$TMPDIR"/frp_0.70.1_linux_${FRPS_ARCH}/frps runtime/bin/frps
    chmod +x runtime/bin/frps
    log "Installed runtime/bin/frps"
  fi
fi

# --- system deps ------------------------------------------------------------
log "Installing system dependencies"
if [ "$DRY_RUN" = 0 ]; then
  case "$PKG" in
    apt)
      $SUDO apt-get update -y >/dev/null
      $SUDO apt-get install -y python3 python3-venv python3-pip curl ca-certificates >/dev/null
      ;;
    yum|dnf)
      $SUDO $PKG install -y python3 python3-pip python3-venv curl ca-certificates >/dev/null
      ;;
  esac
fi

# --- venv -------------------------------------------------------------------
if [ ! -d venv ]; then
  log "Creating Python venv"
  if [ "$DRY_RUN" = 0 ]; then
    python3 -m venv venv
    venv/bin/pip install --upgrade pip >/dev/null
    venv/bin/pip install -r requirements.txt
  fi
fi

# --- db init ----------------------------------------------------------------
log "Initializing database"
if [ "$DRY_RUN" = 0 ]; then
  venv/bin/python init_db.py
fi

# --- frps systemd -----------------------------------------------------------
if [ "$NO_SYSTEMD" = 0 ]; then
  log "Installing systemd unit frps.service"
  if [ "$DRY_RUN" = 0 ]; then
    $SUDO cp runtime/frps.service /etc/systemd/system/frps.service
    $SUDO systemctl daemon-reload
    $SUDO systemctl enable frps.service
    $SUDO systemctl restart frps.service || true
    sleep 2
    if ! systemctl is-active --quiet frps.service; then
      log "frps.service not active — check 'journalctl -u frps'"
    else
      log "frps.service is active"
    fi
  fi

  log "Installing systemd unit frps-manager.service (port 5390)"
  if [ "$DRY_RUN" = 0 ]; then
    $SUDO cp runtime/frps-manager.service /etc/systemd/system/frps-manager.service
    $SUDO systemctl daemon-reload
    $SUDO systemctl enable frps-manager.service
    $SUDO systemctl restart frps-manager.service || true
    sleep 2
    if ! systemctl is-active --quiet frps-manager.service; then
      log "frps-manager.service not active — check 'journalctl -u frps-manager'"
    else
      log "frps-manager.service is active on http://0.0.0.0:5390"
    fi
  fi
else
  log "Skipped systemd (--no-systemd)"
fi

cat <<EOF

================================================================
 frps-manager deployed!

 Web UI:     http://<this-host>:5390
 Default:    admin / admin   (CHANGE IMMEDIATELY under "改密")

 frps bind:  0.0.0.0:7000
 frps dashboard: 127.0.0.1:7500  (admin / admin123)
 frps vhost_http:   0.0.0.0:80   (set FRPS_VHOST_HTTP_PORT in service to override)
 frps vhost_https:  0.0.0.0:443

 To customize, edit:
   /etc/systemd/system/frps.service           (frps CLI flags)
   /etc/systemd/system/frps-manager.service   (Web UI port / env)

 To upgrade later:
   cd $PROJECT_DIR
   sudo systemctl stop frps-manager frps
   git pull
   venv/bin/pip install -r requirements.txt
   sudo systemctl start frps frps-manager
================================================================
EOF