#!/bin/bash

set -e

CONTAINER_NAME="gitea"
HTTP_PORT="80"
HTTPS_PORT="443"
SSH_PORT="2222"
PROFILE_NAME="gitea-profile"
ROOT_DISK_SIZE="20GB"
NETWORK_NAME="incusbr0"
DB_USER="gitea"
DB_PASS="gitea_password"  # Default password, can be overridden with -p option

# Get the hostname of the host machine
HOST_DOMAIN=$(hostname -f)

# Function to create the Incus profile
create_profile() {
    local cpu=$1
    local ram=$2
    
    echo "Creating Incus profile with root disk size of $ROOT_DISK_SIZE..."
    incus profile create $PROFILE_NAME || true
    if [ ! -z "$ram" ]; then
        echo "Setting RAM limit to ${ram}GB"
        incus profile set $PROFILE_NAME limits.memory=${ram}GB
    else
        echo "No RAM limit specified. Using default."
    fi
    if [ ! -z "$cpu" ]; then
        echo "Setting CPU limit to $cpu"
        incus profile set $PROFILE_NAME limits.cpu=$cpu
    else
        echo "No CPU limit specified. Using default."
    fi
    incus profile device add $PROFILE_NAME root disk path=/ pool=default size=$ROOT_DISK_SIZE
    
    echo "Ensuring network exists..."
    if ! incus network list | grep -q $NETWORK_NAME; then
        echo "Creating network $NETWORK_NAME..."
        incus network create $NETWORK_NAME
    fi
}

# Function to check if profile exists
profile_exists() {
    incus profile list | grep -q $PROFILE_NAME
}

# Function to install Gitea and PostgreSQL using Docker Compose
install_gitea() {
    if ! profile_exists; then
        echo "Error: Profile does not exist. Please create a profile first using '$0 profile'."
        exit 1
    fi

    echo "Creating Incus container..."
    incus launch images:ubuntu/22.04 $CONTAINER_NAME -p $PROFILE_NAME

    echo "Attaching network to container..."
    incus network attach $NETWORK_NAME $CONTAINER_NAME

    echo "Configuring container..."
    incus config set $CONTAINER_NAME security.nesting=true
    incus config set $CONTAINER_NAME linux.kernel_modules=overlay,nf_nat
    incus config device add $CONTAINER_NAME gitea-ssh proxy listen=tcp:0.0.0.0:$SSH_PORT connect=tcp:127.0.0.1:22
    incus config device add $CONTAINER_NAME gitea-http proxy listen=tcp:0.0.0.0:$HTTP_PORT connect=tcp:127.0.0.1:80
    incus config device add $CONTAINER_NAME gitea-https proxy listen=tcp:0.0.0.0:$HTTPS_PORT connect=tcp:127.0.0.1:443

    echo "Waiting for network to be ready..."
    sleep 10

    echo "Installing Docker and Docker Compose..."
    incus exec $CONTAINER_NAME -- bash -c "
    apt update
    apt install -y docker.io docker-compose
    "

    echo "Creating Docker Compose file..."
    incus exec $CONTAINER_NAME -- bash -c "cat > /root/docker-compose.yml << EOL
version: '3'

networks:
  gitea:
    external: false

services:
  traefik:
    image: traefik:v2.5
    command:
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --certificatesresolvers.myresolver.acme.tlschallenge=true
      - --certificatesresolvers.myresolver.acme.email=admin@$HOST_DOMAIN
      - --certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /root/letsencrypt:/letsencrypt
    networks:
      - gitea

  server:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - DB_TYPE=postgres
      - DB_HOST=db:5432
      - DB_NAME=gitea
      - DB_USER=$DB_USER
      - DB_PASSWD=$DB_PASS
      - ROOT_URL=https://$HOST_DOMAIN
    restart: always
    networks:
      - gitea
    volumes:
      - /var/lib/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    expose:
      - '3000'
      - '22'
    depends_on:
      - db
    labels:
      - traefik.enable=true
      - traefik.http.routers.gitea.rule=Host(\`$HOST_DOMAIN\`)
      - traefik.http.routers.gitea.entrypoints=websecure
      - traefik.http.routers.gitea.tls.certresolver=myresolver
      - traefik.http.services.gitea.loadbalancer.server.port=3000
      - traefik.http.routers.gitea-http.rule=Host(\`$HOST_DOMAIN\`)
      - traefik.http.routers.gitea-http.entrypoints=web
      - traefik.http.routers.gitea-http.middlewares=redirect-to-https
      - traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https
    
  db:
    image: postgres:latest
    restart: always
    environment:
      - POSTGRES_USER=$DB_USER
      - POSTGRES_PASSWORD=$DB_PASS
      - POSTGRES_DB=gitea
    networks:
      - gitea
    volumes:
      - /var/lib/postgresql/data:/var/lib/postgresql/data
EOL"

    echo "Starting Gitea, PostgreSQL, and Traefik with Docker Compose..."
    incus exec $CONTAINER_NAME -- bash -c "
    cd /root
    mkdir -p letsencrypt
    docker-compose up -d
    "

    echo "Gitea setup complete!"
    echo "Access Gitea at https://$HOST_DOMAIN"
    echo "SSH access available on port $SSH_PORT"
}

# Function to display usage
usage() {
    echo "Usage"
    echo "Create profile:"
    echo "$0 profile [-c cpu] [-r ram]"
    echo ""
    echo "Install Gitea and PostgreSQL:"
    echo "$0 install [-p dbpassword]"
}

# Main script logic
case "$1" in
    profile)
        shift
        cpu=""
        ram=""
        while getopts ":c:r:" opt; do
            case ${opt} in
                c )
                    cpu=$OPTARG
                    ;;
                r )
                    ram=$OPTARG
                    ;;
                \? )
                    echo "Invalid option: $OPTARG" 1>&2
                    usage
                    exit 1
                    ;;
                : )
                    echo "Invalid option: $OPTARG requires an argument" 1>&2
                    usage
                    exit 1
                    ;;
            esac
        done
        create_profile $cpu $ram
        ;;
    install)
        shift
        while getopts ":p:" opt; do
            case ${opt} in
                p )
                    DB_PASS=$OPTARG
                    ;;
                \? )
                    echo "Invalid option: $OPTARG" 1>&2
                    usage
                    exit 1
                    ;;
                : )
                    echo "Invalid option: $OPTARG requires an argument" 1>&2
                    usage
                    exit 1
                    ;;
            esac
        done
        install_gitea
        ;;
    *)
        usage
        exit 1
        ;;
esac

exit 0