#!/bin/bash

SCRIPT_VER="1.12"

APP="SyncThing"
APP_CATEGORY="Sync Solutions"
APP_SCOPE="user"
APP_ENABLED="yes"
STORED_PASSWORD_SERVICE="syncthing"
SUPPORTED_ON="Ubuntu20.04,Ubuntu22.04,Ubuntu24.04"
USE_APACHE2="yes"
DAEMON_PORT=8384
LIBRARY="functions4.sh"
SYNCTHING_APT_REPO_URL="https://apt.syncthing.net/"
SYNCTHING_APT_KEY_URL="https://syncthing.net/release-key.gpg"
SYNCTHING_APT_CHANNEL="stable-v2"

if [ "${SUPPORT-}" = '' ]; then
    SUPPORT="https://installers.rapidseedbox.com/scripts/whmcs_client_installers/support"
fi

LOGFILE="/var/log/whmcs_client_installers/${0}.log"
[ ! -d "/var/log/whmcs_client_installers" ] && mkdir -p "/var/log/whmcs_client_installers"

wget -4 -nc -q --no-check-certificate --timeout=20 --tries=5 "${SUPPORT}/${LIBRARY}" >> "${LOGFILE}" 2>&1
if [ ! -f "./${LIBRARY}" ] ; then
    echo "55"
    echo "Error downloading \"${SUPPORT}/${LIBRARY}\"" >> "${LOGFILE}"
    exit 55
fi

# shellcheck source=support/functions4.sh
. "./${LIBRARY}"
SCRIPTENTRY

VALIDATE_USER

while : ; do

    main_rc=1

    CHECK_APP ; _rc=$?
    if [ ${_rc} -ne 0 ] ; then
        main_rc=${_rc}
        break
    fi

    APT_INSTALL "ca-certificates" "gnupg" || break
    ADD_APT_REPO "${SYNCTHING_APT_REPO_URL}" "syncthing" "${SYNCTHING_APT_CHANNEL}" \
        "${SYNCTHING_APT_KEY_URL}" "syncthing" || break
    APT_UPDATE || break
    APT_INSTALL \
            "apache2-utils" \
            "syncthing" \
            "xmlstarlet" \
        || break

    [ -d "${USERHOME}/.config/syncthing" ] \
        || MKDIR "${USERHOME}/.config/syncthing"

    ST_DAEMON_PORT="$(( USERUID + 8384 - FIRST_UID ))"
    if [ "${USERUID}" = "${FIRST_UID}" ] ; then
        _prefix="/syncthing"
    else
        _prefix="/syncthing-${USERNAME}"
    fi

    #
    # TODO: Need testing
    # xmlstarlet edit --update "configuration/gui/password" --value "${password_bcrypt_hash}" config.xml
    # su user -c "syncthing generate --gui-user=user2 --gui-password=ChangeMe2" ; echo $?
    #

    password_bcrypt_hash="$( htpasswd -bnBC 10 "" "${USERPASSWORD}" | tr -d ':\n' )"
    cat <<-EOF > "${USERHOME}/.config/syncthing/config.xml"
	<configuration version="29">
	    <gui enabled="true" tls="false" debugging="false" sendBasicAuthPrompt="false">
	        <address>127.0.0.1:${ST_DAEMON_PORT}</address>
	        <authMode>static</authMode>
	        <insecureSkipHostcheck>true</insecureSkipHostcheck>
	        <user>${USERNAME}</user>
	        <password>${password_bcrypt_hash}</password>
	        <theme>dark</theme>
	    </gui>
	</configuration>
	EOF

    CHOWN_DIR "${USERNAME}":"${USERNAME}" "${USERHOME}/.config/syncthing"


    # Setup systemd service
    cat <<-EOF > "/etc/systemd/system/syncthing@.service"
	[Unit]
	Description=Syncthing - Open Source Continuous File Synchronization for %I
	Documentation=http://docs.syncthing.net/
	After=network.target

	[Service]
	User=%i
	Environment="STLOGFORMATTIMESTAMP="
	Environment="STLOGFORMATLEVELSTRING=false"
	Environment="STLOGFORMATLEVELSYSLOG=true"
	Environment="GOMAXPROCS=2"
	ExecStart=/usr/bin/syncthing serve --no-browser --no-restart
	Restart=on-failure
	RestartSec=1
	SuccessExitStatus=3 4
	RestartForceExitStatus=3 4

	[Install]
	WantedBy=multi-user.target
	EOF

        cat <<-EOF > "/etc/systemd/system/syncthing.slice" 2>> "${LOGFILE}"
	[Unit]
	Description=${APP} resource limiting
	Before=slices.target

	[Slice]
	CPUAccounting=yes
	CPUQuota=20%
	IOAccounting=yes
	IOReadBandwidthMax=/ 20M
	IOWriteBandwidthMax=/ 20M
	EOF

        [ ! -d "/etc/systemd/system/syncthing@.service.d" ] \
            && MKDIR "/etc/systemd/system/syncthing@.service.d"

        cat <<-EOF > "/etc/systemd/system/syncthing@.service.d/001-Slice.conf"
		[Service]
		Slice=syncthing.slice
		EOF

        cat <<-EOF > "/etc/systemd/system/syncthing@.service.d/10-Nice.conf"
		[Service]
		Nice=19
		EOF

    SYSTEMD_RELOAD

    systemctl is-enabled "syncthing@root" > /dev/null 2>&1 \
        && SVC_DISABLE "syncthing@root"
    systemctl is-active "syncthing@root" > /dev/null 2>&1 \
        && SVC_STOP    "syncthing@root"

    SVC_ENABLE "syncthing@${USERNAME}"
    SVC_START  "syncthing@${USERNAME}"

    RUN_LOG "sleep 3"
    SVC_STOP  "syncthing@${USERNAME}"

    # -- Customize service instance
    RUN_LOG "sed -i -e 's,\(\s*\)<maxFolderConcurrency>.*,\1<maxFolderConcurrency>1</maxFolderConcurrency>,' \
                 '${USERHOME}/.config/syncthing/config.xml'"
    RUN_LOG "sed -i -e 's,\(\s*\)<urAccepted>.*,\1<urAccepted>-1</urAccepted>,' \
                 '${USERHOME}/.config/syncthing/config.xml'"
    RUN_LOG "sed -i -e 's,\(\s*\)<urSeen>.*,\1<urSeen>3</urSeen>,' \
                 '${USERHOME}/.config/syncthing/config.xml'"
    RUN_LOG "sed -i -re '/\s*<unackedNotificationID>authenticationUserAndPassword/d' \
                 '${USERHOME}/.config/syncthing/config.xml'"

    SVC_START  "syncthing@${USERNAME}"

    # Configure `apache2` service
    if [ -d "/etc/apache2/userconf-enabled/" ] ; then
        [ -e "/etc/apache2/userconf-enabled/syncthing.conf" ] \
            && RM_FILES "/etc/apache2/userconf-enabled/syncthing.conf"
        cat <<-EOF > "/etc/apache2/userconf-enabled/syncthing-${USERNAME}.conf"
	RewriteEngine on
	RewriteRule ^${_prefix}\$ ${_prefix}/ [R=permanent]
	<Location ${_prefix}/>
	   Order Allow,Deny
	   Allow from All
	#   AuthType Digest
	#   AuthName "apache2"
	#   AuthDigestProvider file
	#   AuthUserFile "/etc/apache2/users.password"
	#   Require user user
	   ProxyPass http://127.0.0.1:${ST_DAEMON_PORT}/
	   ProxyPassReverse http://127.0.0.1:${ST_DAEMON_PORT}/
	   RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
	</Location>
	EOF
        RUN_LOG "apachectl -t" || break
        SVC_RESTART "apache2"
    fi


    main_rc=0
    break

done


# Cleanup if error
if [ "${main_rc}" -ne 0 ] && [ "${main_rc}" -ne 111 ] && [ "${main_rc}" -ne 117 ] ; then
    ERROR "'${APP}': Installation failed."

    # Cleanup tasks here

    systemctl is-enabled "syncthing@root" > /dev/null 2>&1 \
        && SVC_DISABLE "syncthing@root"
    systemctl is-active "syncthing@root" > /dev/null 2>&1 \
        && SVC_STOP    "syncthing@root"

    SVC_DISABLE "syncthing@${USERNAME}"
    SVC_STOP    "syncthing@${USERNAME}"

    if [ -e "/etc/apache2/userconf-enabled/syncthing-${USERNAME}.conf" ] ; then
        RM_FILES "/etc/apache2/userconf-enabled/syncthing-${USERNAME}.conf"
        SVC_RESTART "apache2"
    fi

#    RM_FILES    "/etc/systemd/system/syncthing@.service"
    SYSTEMD_RELOAD
fi

SCRIPTEXIT