#!/bin/bash

SCRIPT_VER="1.1"

APP="Filebrowser"
APP_CATEGORY="File Managers"
APP_SCOPE="system"
APP_ENABLED="yes"
#><#APP_CHECK_VER_CMD="[ -e "${APP_DIRECTORY}/version.id" ] && cat "${APP_DIRECTORY}/version.id" || echo """
#><#APP_UPGRADE_VER_CMD="curl -Ls --connect-timeout 10 --retry 3 -m 30 -o /dev/null -w "%{url_effective}" https://github.com/filebrowser/filebrowser/releases/latest | awk -F/ "{print \$NF}" | tr -d "v""
SUPPORTED_ON="Ubuntu16.04,Ubuntu18.04,Ubuntu20.04,Ubuntu22.04"
USE_APACHE2="yes"
DAEMON_PORT=38180
LIBRARY="functions4.sh"

if [ "${SUPPORT-}" = '' ]; then
    SUPPORT="https://installers.rapidseedbox.com/scripts/whmcs_client_installers/support"
fi

LOGFILE="/var/log/whmcs_client_installers/${0}.log"
[ ! -d "/var/log/whmcs_client_installers" ] && mkdir -p "/var/log/whmcs_client_installers"

wget -4 -nc -q --no-check-certificate --timeout=20 --tries=5 ${SUPPORT}/${LIBRARY} >> "${LOGFILE}" 2>&1
if [ ! -f "./${LIBRARY}" ] ; then
    echo "55"
    echo "Error downloading \"${SUPPORT}/${LIBRARY}\"" >> "${LOGFILE}"
    exit 55
fi

# shellcheck source=support/functions4.sh
. "./${LIBRARY}"
SCRIPTENTRY

APP_DIRECTORY="${USERHOME}/.config/filebrowser"

while : ; do

    main_rc=1

    CHECK_APP ; _rc=$?
    if [ ${_rc} -ne 0 ] ; then
        main_rc=${_rc}
        break
    fi

    MKDIR "${APP_DIRECTORY}" || break

    INFO "Installing '${APP}' binary into ${APP_DIRECTORY} directory"
    if [ ! -d "/usr/local/bin" ] ; then
        MKDIR "/usr/local/bin" || break
    fi
    FB_URL=""
    _ver="$( curl -Ls --connect-timeout 10 --retry 3 -m 30 -o /dev/null -w '%{url_effective}' \
                 https://github.com/filebrowser/filebrowser/releases/latest 2> /dev/null \
               | awk -F/ '{print $NF}' \
               | tr -d 'v' )"
    _rc=$?
    if [ "${_rc}" != "0" ] || [ -z "${_ver}" ] ; then
        ERROR "Failed to retrieve ${APP} binary release info !"
        break
    else
        FB_URL="https://github.com/filebrowser/filebrowser/releases/download/v${_ver}/linux-amd64-filebrowser.tar.gz"
        INFO "${APP} binary release URL: ${FB_URL}"
    fi
    if [ -z "${FB_URL}" ] ; then
        ERROR "Failed to parse ${APP} binary release URL !"
        break
    fi
    WGET "${FB_URL}" || break
    TAR_ZXF "${TMP_DIR}/linux-amd64-filebrowser.tar.gz" "${APP_DIRECTORY}/" || break
    echo "${_ver}" > "${APP_DIRECTORY}/version.id"

    WGET "${SUPPORT}/filebrowser/img.tar.gz" || break
    TAR_ZXF "${TMP_DIR}/img.tar.gz" "${APP_DIRECTORY}/" || break

    FB_PORT="$(( USERUID - FIRST_UID + 38180 ))"

    _sfx=""
    if [ "${USERUID}" != "${FIRST_UID}" ] ; then
        _sfx="-${USERNAME}"
    fi

    cat<<-EOF > "${APP_DIRECTORY}/filebrowser.json"
	{
	  "port": ${FB_PORT},
	  "baseURL": "/filebrowser${_sfx}",
	  "address": "127.0.0.1",
	  "log": "stdout",
	  "disable-exec": "true",
	  "database": "${APP_DIRECTORY}/filebrowser.db",
	  "root": "${USERHOME}",
	  "noauth": "true"
	}
	EOF

    cat<<-EOF > "${APP_DIRECTORY}/custom.css"
	@import url("https://theme-park.dev/css/base/filebrowser/plex.css");
	EOF

    if [ -d "/etc/apache2/userconf-enabled" ] ; then
        cat <<-EOF > "/etc/apache2/userconf-enabled/filebrowser-${USERNAME}.conf"
	RewriteEngine on
	RewriteRule ^/filebrowser${_sfx}$ /filebrowser${_sfx}/ [R=permanent]
	<Location /filebrowser${_sfx}>
	    Order deny,allow
	    Deny from all
	    Allow from all
	    AuthType Digest
	    AuthName "apache2"
	    AuthUserFile /etc/apache2/users.password
	    Require user ${USERNAME}
	    RequestHeader set X-RSB-Auth "admin"
	    ProxyPass http://127.0.0.1:${FB_PORT}/filebrowser${_sfx}
	    ProxyPassReverse http://127.0.0.1:${FB_PORT}/filebrowser${_sfx}
	</Location>
	EOF
        SVC_RELOAD "${APACHE_SVC}"
    fi

    RUN_LOG "${APP_DIRECTORY}/filebrowser \
                 --config ${APP_DIRECTORY}/filebrowser.json \
                 --database ${APP_DIRECTORY}/filebrowser.db \
               config init" || break

    RUN_LOG "${APP_DIRECTORY}/filebrowser \
                 --config ${APP_DIRECTORY}/filebrowser.json \
                 --database ${APP_DIRECTORY}/filebrowser.db \
               users add admin adminadminadmin \
                 --perm.share=false \
                 --perm.execute=false" || break

    RUN_LOG "${APP_DIRECTORY}/filebrowser \
                 --config ${APP_DIRECTORY}/filebrowser.json \
                 --database ${APP_DIRECTORY}/filebrowser.db \
               config set \
                 --auth.method=proxy \
                 --auth.header=\"X-RSB-Auth\" \
                 --branding.disableExternal=true \
                 --branding.files=\"${APP_DIRECTORY}\" \
                 --branding.name=\"Rapidseedbox\" \
                 --perm.share=false \
                 --perm.execute=false" || break



    CHOWN_DIR "${USERNAME}":"${USERNAME}" "${APP_DIRECTORY}" || break

    cat <<-'EOF' > "/etc/systemd/system/filebrowser@.service"
	[Unit]
	Description=Filebrowser service
	After=network.target

	[Service]
	Type=simple
	User=%I
	Group=%I
	Restart=on-failure
	PermissionsStartOnly=true
	ExecStart=/home/%I/.config/filebrowser/filebrowser \
                       --config /home/%I/.config/filebrowser/filebrowser.json \
                       --database /home/%I/.config/filebrowser/filebrowser.db \
	               -r /home/%I
	ExecStartPost=/bin/sh -c "echo $MAINPID > /home/%I/.config/filebrowser/filebrowser.pid"

	[Install]
	WantedBy=multi-user.target
	EOF

    SYSTEMD_RELOAD
    SVC_ENABLE "filebrowser@${USERNAME}" || break
    SVC_START  "filebrowser@${USERNAME}" || break


    main_rc=0
    break

done


# Cleanup if error
if [ ${main_rc} -ne 0 -a ${main_rc} -ne 111 -a ${main_rc} -ne 117 ] ; then
    ERROR "'${APP}': Starting cleanup procedure"
    # --
    if [ -e "/etc/apache2/userconf-enabled/filebrowser-${USERNAME}.conf" ] ; then
        RM_FILES "/etc/apache2/userconf-enabled/filebrowser-${USERNAME}.conf"
        SVC_RELOAD "${APACHE_SVC}"
    fi
    # --
    systemctl is-enabled "filebrowser@${USERNAME}" > /dev/null 2>&1 \
        && SVC_DISABLE "filebrowser@${USERNAME}"
    systemctl is-active "filebrowser@${USERNAME}" > /dev/null 2>&1  \
        && SVC_STOP "filebrowser@${USERNAME}"
    # --
    RM_DIRS "${APP_DIRECTORY}"
fi

SCRIPTEXIT