#!/bin/bash

SCRIPT_VER="1.2"

APP="AriaNG"
APP_CATEGORY="Torrent Clients and Utilities"
APP_SCOPE="system"
APP_ENABLED="yes"
STORED_PASSWORD_SERVICE="userdir"
SUPPORTED_ON="Ubuntu24.04,Ubuntu20.04,Ubuntu22.04"
USE_APACHE2="yes"
DAEMON_PORT=6800
LIBRARY="functions4.sh"

if [ "${SUPPORT-}" = '' ]; then
    SUPPORT="https://installers.rapidseedbox.com/scripts/whmcs_client_installers/support"
fi

LOGFILE="/var/log/whmcs_client_installers/${0}.log"
[ ! -d "/var/log/whmcs_client_installers" ] && mkdir -p "/var/log/whmcs_client_installers"

wget -4 -nc -q --no-check-certificate --timeout=20 --tries=5 ${SUPPORT}/${LIBRARY} >> "${LOGFILE}" 2>&1
if [ ! -f "./${LIBRARY}" ] ; then
    echo "55"
    echo "Error downloading \"${SUPPORT}/${LIBRARY}\"" >> "${LOGFILE}"
    exit 55
fi

# shellcheck source=support/functions4.sh
. "./${LIBRARY}"
SCRIPTENTRY

VALIDATE_USER

APP_DIRECTORY="${USERHOME}/ariang"
CONF_DIRECTORY="${USERHOME}/.config/ariang"

#
# -- References:
# https://github.com/mayswind/AriaNg
# http://ariang.mayswind.net/
#

while : ; do

    main_rc=1

    CHECK_APP ; _rc=$?
    if [ ${_rc} -ne 0 ] ; then
        main_rc=${_rc}
        break
    fi

    if    [ ! -s "/etc/ssl/a.seedbox.vip/fullchain.pem" ] \
       || [ ! -s "/etc/ssl/a.seedbox.vip/privkey.pem" ]
    then
        ERROR "Please run 'easy-ssl -f' first!"
        break
    fi

    APT_INSTALL "aria2" "curl" || break

    # -- Fetch latest `ariang`
    _ariang_ver="$( curl -Ls -m 30 -o /dev/null -w "%{url_effective}" \
                          https://github.com/mayswind/AriaNg/releases/latest \
                     | awk -F "/" "{print \$NF}" )"
    if [ -z "${_ariang_ver}" ] ; then
        ERROR "Could not determine ${APP} version!"
        break
    fi
    INFO "Latest build: ${_ariang_ver}"
    WGET "https://github.com/mayswind/AriaNg/releases/download/${_ariang_ver}/AriaNg-${_ariang_ver}.zip" \
         "${TMP_DIR}/ariang.zip" \
        || break

    [ -d "${APP_DIRECTORY}" ] || MKDIR "${APP_DIRECTORY}"
    [ -d "${CONF_DIRECTORY}" ] || MKDIR "${CONF_DIRECTORY}"
    UNZIP "${TMP_DIR}/ariang.zip" "${APP_DIRECTORY}" || break
    RUN_LOG "echo '${_ariang_ver}' > '${APP_DIRECTORY}/version.id'"

    ARIA2_PORT="$(( USERUID - FIRST_UID + 6800 ))"
    RPC_SECRET="$( apg -n 1 -m 30 -M NCL )"
    echo "${RPC_SECRET}" > "${APP_DIRECTORY}/.rpc_secret"

    WGET "${SUPPORT}/ariang/aria2.conf" "${CONF_DIRECTORY}/aria2.conf" || break
    RUN_LOG "echo \"s|###USERHOME###|${USERHOME}|g\" | \
        sed -f - -i '${CONF_DIRECTORY}/aria2.conf' 2>&1"
    RUN_LOG "echo \"s|###ARIA2_PORT###|${ARIA2_PORT}|g\" | \
        sed -f - -i '${CONF_DIRECTORY}/aria2.conf' 2>&1"
    RUN_LOG "echo \"s|###RPC_SECRET###|${RPC_SECRET}|g\" | \
        sed -f - -i '${CONF_DIRECTORY}/aria2.conf' 2>&1"

    CP_FILE "/etc/ssl/a.seedbox.vip/fullchain.pem" "${CONF_DIRECTORY}/fullchain.pem" || break
    CP_FILE "/etc/ssl/a.seedbox.vip/privkey.pem" "${CONF_DIRECTORY}/privkey.pem"     || break
    CHOWN_FILE "${USERNAME}":"${USERNAME}" "${CONF_DIRECTORY}/fullchain.pem"         || break
    CHOWN_FILE "${USERNAME}":"${USERNAME}" "${CONF_DIRECTORY}/privkey.pem"           || break
    CHMOD_FILE 0644 "${CONF_DIRECTORY}/fullchain.pem"                                || break

    RUN_LOG "touch ${CONF_DIRECTORY}/aria2.session 2>&1"

    # -- Set up `systemd` service unit
    cat <<-EOF > "${CONF_DIRECTORY}/aria2-systemd-wrapper.sh"
	#!/bin/sh

	/usr/bin/aria2c --conf-path="${CONF_DIRECTORY}/aria2.conf" \\
	                --disable-ipv6=true \\
	                --save-session="${CONF_DIRECTORY}/aria2.session" \\
	                --input-file="${CONF_DIRECTORY}/aria2.session" \\
	                --force-save \\
	                --save-session-interval=60 \\
	                --enable-rpc \\
	                --rpc-listen-all=true \\
	                --rpc-listen-port=${ARIA2_PORT} \\
	                --rpc-allow-origin-all=true \\
	                --rpc-certificate=${CONF_DIRECTORY}/fullchain.pem \\
	                --rpc-private-key=${CONF_DIRECTORY}/privkey.pem \\
	                --rpc-secure=true \\
	                --rpc-save-upload-metadata=false \\
	                --rpc-secret="${RPC_SECRET}"
	EOF

    CHOWN_DIR "${USERNAME}":"${USERNAME}" "${APP_DIRECTORY}" || break
    CHOWN_DIR "${USERNAME}":"${USERNAME}" "${CONF_DIRECTORY}" || break

    _svc_file="/etc/systemd/system/ariang@.service"
    if [ ! -e "${_svc_file}" ] ; then
        cat <<-EOF > "${_svc_file}"
	[Unit]
	Description=AriaNG
	After=network.target

	[Service]
	Type=simple
	#KillMode=process
	User=%I
	Group=%I
	ExecStart=/bin/bash /home/%I/.config/ariang/aria2-systemd-wrapper.sh
	ExecStop=/bin/kill -HUP \$MAINPID
	Restart=always

	[Install]
	WantedBy=multi-user.target
	EOF
        SYSTEMD_RELOAD
    fi

    SVC_ENABLE "ariang@${USERNAME}" || break
    SVC_START  "ariang@${USERNAME}" || break

    # -- Set up `apache2` configuration
    _apache_conf="/etc/apache2/userconf-enabled/ariang-${USERNAME}.conf"
    _password_file="/etc/apache2/users.password"
    _prefix="/ariang"
    if [ ! -d "/etc/apache2/userconf-enabled/" ] ; then
        MKDIR "/etc/apache2/userconf-enabled" || break
    fi

    cat <<-EOF > "${_apache_conf}"
	RewriteEngine on
	RewriteCond %{THE_REQUEST} ^.*/\.
	RewriteRule ^(.*)$ - [R=404]
	RewriteRule ^${_prefix}$ ${_prefix}/ [R=permanent]
	Alias "${_prefix}" "${APP_DIRECTORY}"
	<Location ${_prefix}>
	    Order deny,allow
	    Deny from all
	    Allow from all
	    AuthType Digest
	    AuthName "apache2"
	    AuthUserFile ${_password_file}
	    Require user ${USERNAME}
	</Location>
	EOF
    SVC_RELOAD "apache2"


    main_rc=0
    break

done


# Cleanup if error
if [ ${main_rc} -ne 0 -a ${main_rc} -ne 111 -a ${main_rc} -ne 117 ] ; then
    ERROR "'${APP}': Starting cleanup procedure"
    SVC_DISABLE "ariang@${USERNAME}"
    SVC_STOP  "ariang@${USERNAME}"
    if [ -f "/etc/apache2/userconf-enabled/ariang-${USERNAME}.conf" ] ; then
        RM_FILES \
            "/etc/apache2/userconf-enabled/ariang-${USERNAME}.conf"
        SVC_RESTART "apache2"
    fi
    RM_FILES "/etc/systemd/system/ariang@.service"
    SYSTEMD_RELOAD
    RM_DIRS  "${APP_DIRECTORY}" \
             "${CONF_DIRECTORY}"
fi

SCRIPTEXIT