#!/bin/bash

echo "entrypoint -- Starting AVideo Platform..."
CONFIG_FILE=/etc/apache2/sites-enabled/000-default.conf

if [ "_${CREATE_TLS_CERTIFICATE}_" == "_yes_" ]; then
  echo "entrypoint -- Generate Certificate..."
  echo "entrypoint -- Certificate file: ${TLS_CERTIFICATE_FILE}"
  echo "entrypoint -- Certificate key: ${TLS_CERTIFICATE_KEY}"

  mkdir -p `dirname ${TLS_CERTIFICATE_FILE}`
  mkdir -p `dirname ${TLS_CERTIFICATE_KEY}`
  # Set subjectAltName for certificate
  if [ "${SERVER_NAME}" = "localhost" ]; then
    subjectAltName="DNS:localhost,IP:127.0.0.1"
  else
    subjectAltName="DNS:${SERVER_NAME}"
  fi

  # Create config file for OpenSSL
  CONFIG=$(cat <<-EOF
[dn]
C=NN
L=Earth
O=AVideo
OU=Development
CN=${SERVER_NAME}

[req]
distinguished_name = dn

[EXT]
subjectAltName = ${subjectAltName}
extendedKeyUsage = serverAuth
EOF
)

  # Generate self-signed certificate with OpenSSL
  openssl req -x509 \
    -out ${TLS_CERTIFICATE_FILE} -keyout ${TLS_CERTIFICATE_KEY} \
    -newkey rsa:4096 \
    -nodes \
    -sha256 \
    -days 3650 \
    -subj "/C=NN/L=Earth/O=AVideo/OU=Development/CN=${SERVER_NAME}" \
    -extensions EXT \
    -config <(echo "${CONFIG}")

  # Verify certificate
  echo "entrypoint -- New Certificate config..."
  openssl x509 -in ${TLS_CERTIFICATE_FILE} -noout -text || true

fi

sed -i 's#SERVER_NAME#'${SERVER_NAME}'#' ${CONFIG_FILE}
sed -i 's#CONTACT_EMAIL#'${CONTACT_EMAIL}'#' ${CONFIG_FILE}

echo "entrypoint -- Configure Apache..."
sed -i 's#TLS_CERTIFICATE_FILE#'${TLS_CERTIFICATE_FILE}'#' ${CONFIG_FILE}
sed -i 's#TLS_CERTIFICATE_KEY#'${TLS_CERTIFICATE_KEY}'#' ${CONFIG_FILE}

mkdir -p /etc/letsencrypt/live/localhost/

cp ${TLS_CERTIFICATE_FILE} /etc/letsencrypt/live/localhost/fullchain.pem
cp ${TLS_CERTIFICATE_KEY} /etc/letsencrypt/live/localhost/privkey.pem

#echo "entrypoint -- Waiting for database ${DB_MYSQL_HOST} to be up and running"
#php /usr/local/bin/wait-for-db.php
#if [ $? -ne 0 ]; then
#  echo "entrypoint -- Stopping container"
#  exit 1
#fi

if [ -f /var/www/html/AVideo/plugin/User_Location/install/install.sql ]; then
  echo "entrypoint -- Using existing location tables..."
else
  echo "entrypoint -- Create new locations tables..."
  cd /var/www/html/AVideo/plugin/User_Location/install && unzip install.zip
  # Configure AVideo Encoder
  cd /var/www/html/AVideo && git config --global advice.detachedHead false && git clone https://github.com/WWBN/AVideo-Encoder.git Encoder
  # Configure AVideo permissions
  chown -R www-data:www-data /var/www/html/AVideo
fi

if [ -f /var/www/html/AVideo/Encoder/index.php ]; then
  echo "entrypoint -- Using existing Encoder configuration..."
else
  echo "entrypoint -- Create new  Encoder configuration..."
  # Configure AVideo Encoder
  cd /var/www/html/AVideo && git config --global advice.detachedHead false && git clone https://github.com/WWBN/AVideo-Encoder.git Encoder
fi

if [ -d /var/www/html/AVideo/Encoder/videos ]; then
  echo "entrypoint -- Using existing Encoder videos..."
else
  echo "entrypoint -- Create new  Encoder videos..."
  # Configure AVideo Encoder
  mkdir -p /var/www/html/AVideo/Encoder/videos && chown www-data:www-data /var/www/html/AVideo/Encoder/videos && chmod 777 /var/www/html/AVideo/Encoder/videos
fi

echo "entrypoint -- Checking configuration..."
cd /var/www/html/AVideo/install/
php ./cli.php
cd /var/www/html/AVideo/


if [[ "${SERVER_NAME}" = "localhost" ]] || [[ "${SERVER_NAME}" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
  echo "Not executing certbot for ${SERVER_NAME}"
elif [ "_${CREATE_TLS_CERTIFICATE}_" == "_yes_" ]; then
  echo "entrypoint -- Running certbot for ${SERVER_NAME}"
  certbot --apache --non-interactive --agree-tos --register-unsafely-without-email --redirect --keep-until-expiring -d ${SERVER_NAME}
fi

/etc/init.d/apache2 stop

echo "entrypoint -- Writing /var/www/docker_vars.json"
echo "{\"SOCKET_PORT\":${SOCKET_PORT}, \"HTTP_PORT\":${HTTP_PORT}, \"HTTPS_PORT\":${HTTPS_PORT}, \"SERVER_NAME\":\"${SERVER_NAME}\", \"NGINX_RTMP_PORT\":${NGINX_RTMP_PORT}, \"NGINX_HTTP_PORT\":${NGINX_HTTP_PORT}, \"NGINX_HTTPS_PORT\":${NGINX_HTTPS_PORT}}" > /var/www/docker_vars.json

echo "entrypoint -- Starting socket server..."
nohup php /var/www/html/AVideo/plugin/YPTSocket/server.php &


echo "Clear cache"
rm -R /var/www/html/AVideo/videos/cache

echo "entrypoint -- Reset log"
echo '' > /var/www/html/AVideo/videos/avideo.log
chown -R www-data:www-data /var/www/html/AVideo/videos/

echo "entrypoint -- Deny access to .compose"
echo "Deny from all" > /var/www/html/AVideo/.compose/.htaccess

echo "entrypoint -- Running updatedb script..."
cd /var/www/html/AVideo/install && php updatedb.php

echo "entrypoint -- Checking if database '${DB_MYSQL_NAME}' exists..."
if ! mysql -h "${DB_MYSQL_HOST}" -u "${DB_MYSQL_USER}" -p"${DB_MYSQL_PASSWORD}" -e "USE ${DB_MYSQL_NAME};" 2>/dev/null; then
  echo "entrypoint -- Database '${DB_MYSQL_NAME}' does not exist. Deleting configuration.php"
  rm -f /var/www/html/AVideo/Encoder/configuration.php
  echo "entrypoint -- install database ..."
  cd /var/www/html/AVideo/Encoder/ && git pull && cd install && php install.php https://${SERVER_NAME} "${DB_MYSQL_USER}" "${DB_MYSQL_PASSWORD}" "${SYSTEM_ADMIN_PASSWORD}" "${DB_MYSQL_NAME}" "https://${SERVER_NAME}/Encoder/" "${DB_MYSQL_HOST}" "${DB_MYSQL_PORT}"
else
  echo "entrypoint -- Database '${DB_MYSQL_NAME}' exists. Skipping deletion."
fi

echo "entrypoint -- Running reencodeAllVideos script..."
cd /var/www/html/AVideo/Encoder/install && php reencodeAllVideos.php
chown -R www-data:www-data /var/www/html/AVideo/Encoder/videos/

echo "127.0.0.1       ${SERVER_NAME}  www.${SERVER_NAME}" >> /etc/hosts

echo "entrypoint -- Starting cron service..."
cron
service cron start
crontab /etc/cron.d/crontab

bash
source /etc/bash_completion

echo "entrypoint -- service apache2 start"
#apache2-foreground
apachectl -DFOREGROUND
echo "entrypoint -- service apache2 done"

#eof