#!/usr/bin/env bash
set -euo pipefail
if [[ $EUID -ne 0 ]]; then echo 'Run as root' >&2; exit 1; fi
src=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
command -v apt-get >/dev/null || { echo 'Debian apt-get required' >&2; exit 1; }
archive="";build="";policy_created=false
cleanup(){
 if [[ -n $archive ]];then rm -f "$archive";fi
 if [[ -n $build ]];then rm -rf "$build";fi
 if [[ $policy_created == true ]];then rm -f /usr/sbin/policy-rc.d;fi
}
trap cleanup EXIT
install -d -m 0700 /var/lib/debtik/update
exec 9>/var/lib/debtik/update/lock
flock -n 9 || { echo 'An update or installation is already running' >&2;exit 1; }
if [[ ! -e /usr/sbin/policy-rc.d && ! -L /usr/sbin/policy-rc.d ]];then
 printf '#!/bin/sh\nexit 101\n' > /usr/sbin/policy-rc.d
 chmod 0755 /usr/sbin/policy-rc.d
 policy_created=true
fi
export DEBIAN_FRONTEND=noninteractive
apt-get update
apt-get install -y --no-install-recommends ca-certificates curl git tar iproute2 bridge-utils iptables ipset conntrack wireguard-tools keepalived pptp-linux bird2 dnsmasq isc-dhcp-client ppp pppoe charon-systemd strongswan-swanctl libcharon-extra-plugins xl2tpd iputils-ping iputils-tracepath traceroute procps openssl certbot python3 util-linux
required=$(awk '$1=="toolchain" {sub(/^go/,"",$2);print $2}' "$src/go.mod")
if [[ -z $required ]]; then required=$(awk '$1=="go" {print $2}' "$src/go.mod"); fi
if ! command -v go >/dev/null || [[ $(printf '%s\n%s\n' "$required" "$(go version | awk '{sub(/^go/,"",$3);print $3}')" | sort -V | head -n1) != "$required" ]]; then
  case $(uname -m) in x86_64) arch=amd64;; aarch64) arch=arm64;; *) echo 'Unsupported CPU' >&2; exit 1;; esac
  archive=$(mktemp)
  curl --fail --location --retry 3 "https://go.dev/dl/go${required}.linux-${arch}.tar.gz" -o "$archive"
  install -d /opt/debtik
  rm -rf /opt/debtik/go
  tar -C /opt/debtik -xzf "$archive"
  rm -f "$archive"
  export PATH=/opt/debtik/go/bin:$PATH
fi
cd "$src"
build=$(mktemp -d)
commit=$(git rev-parse HEAD 2>/dev/null || printf unknown)
CGO_ENABLED=0 go build -trimpath -ldflags "-X proxmox-router/internal/api.BuildCommit=$commit" -o "$build/proxmox-router" ./cmd/server
CGO_ENABLED=0 go build -trimpath -o "$build/debtik-cli" ./cmd/debtik-cli
install -d -m 0700 /etc/proxmox-router
install -d -m 0700 /var/lib/debtik/update
install -d -m 0755 /usr/local/libexec
install -m 0750 scripts/debtik-update /usr/local/libexec/debtik-update
install -m 0750 scripts/release-version.py /usr/local/libexec/debtik-release-version
install -d -m 0755 /etc/network/interfaces.d
for name in proxmox-router debtik-cli; do
  if [[ -f /usr/local/bin/$name ]]; then cp -p "/usr/local/bin/$name" "/usr/local/bin/$name.previous"; fi
  install -m 0755 "$build/$name" "/usr/local/bin/$name.next"
  mv -f "/usr/local/bin/$name.next" "/usr/local/bin/$name"
done
if [[ -f /etc/network/interfaces ]] && ! grep -Eq '^source[[:space:]]+/etc/network/interfaces\.d/\*' /etc/network/interfaces; then printf '\nsource /etc/network/interfaces.d/*\n' >> /etc/network/interfaces; fi
install -m 0644 systemd/proxmox-router.service /etc/systemd/system/proxmox-router.service
systemctl daemon-reload
systemctl enable proxmox-router.service
systemctl restart proxmox-router.service
systemctl is-active --quiet proxmox-router.service
if [[ $commit =~ ^[a-f0-9]{40}$ ]]; then printf '%s\n' "$commit" > /var/lib/debtik/update/installed_commit; fi
install -m 0600 VERSION /var/lib/debtik/update/installed_version
echo 'DebTik installed: http://<host>/ and debtik-cli'