#!/bin/bash
# HMAC File Server v3.2 - Debian Package Builder
# Creates .deb packages for AMD64 and ARM64 architectures

set -e

# Colors for output
GREEN='\033[0;32m'
BLUE='\033[0;34m'
YELLOW='\033[1;33m'
RED='\033[0;31m'
NC='\033[0m'

print_status() {
    echo -e "${GREEN}[BUILD]${NC} $1"
}

print_info() {
    echo -e "${BLUE}[INFO]${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}[WARN]${NC} $1"
}

print_error() {
    echo -e "${RED}[ERROR]${NC} $1"
}

# Project configuration
PROJECT_DIR=$(pwd)
BUILD_DIR=$PROJECT_DIR/build
DEB_DIR=$PROJECT_DIR/debian
PACKAGE_NAME="hmac-file-server"
VERSION="3.2.0"
MAINTAINER="Alex Renz <renz@uuxo.net>"

# Source files for compilation
SOURCE_FILES="cmd/server/main.go cmd/server/helpers.go cmd/server/config_validator.go cmd/server/config_test_scenarios.go"

print_status "Starting Debian package build for HMAC File Server v$VERSION"
print_info "Building packages for: AMD64, ARM64"

# Check if Go is installed
if ! command -v go &> /dev/null; then
    print_error "Go is not installed or not in PATH"
    exit 1
fi

# Check if dpkg-deb is available
if ! command -v dpkg-deb &> /dev/null; then
    print_error "dpkg-deb is not installed. Please install dpkg-dev package"
    exit 1
fi

# Clean and create required directories
print_info "Setting up build directories..."
rm -rf $BUILD_DIR $DEB_DIR
mkdir -p $BUILD_DIR/{amd64,arm64}
mkdir -p $DEB_DIR/DEBIAN 
mkdir -p $DEB_DIR/usr/local/bin 
mkdir -p $DEB_DIR/etc/hmac-file-server 
mkdir -p $DEB_DIR/var/lib/hmac-file-server/{uploads,deduplication,runtime}
mkdir -p $DEB_DIR/var/log/hmac-file-server
mkdir -p $DEB_DIR/usr/share/doc/hmac-file-server
mkdir -p $DEB_DIR/lib/systemd/system

# Compile Go binaries for both architectures
print_status "Compiling binaries..."
for ARCH in amd64 arm64; do
    print_info "Building for $ARCH..."
    
    # Set cross-compilation environment
    export GOOS=linux
    export GOARCH=$ARCH
    export CGO_ENABLED=0
    
    # Build hmac-file-server
    if go build -ldflags="-w -s" -o $BUILD_DIR/$ARCH/hmac-file-server $SOURCE_FILES; then
        SIZE=$(stat -c%s "$BUILD_DIR/$ARCH/hmac-file-server" | awk '{printf "%.1fMB", $1/1024/1024}')
        print_info "   $ARCH binary built successfully ($SIZE)"
    else
        print_error "Failed to build $ARCH binary"
        exit 1
    fi
done

# Reset environment variables
unset GOOS GOARCH CGO_ENABLED

# Prepare Debian control file template
print_info "Creating package metadata..."
CONTROL_TEMPLATE=$DEB_DIR/DEBIAN/control.template
cat <<EOF > $CONTROL_TEMPLATE
Package: $PACKAGE_NAME
Version: $VERSION
Architecture: ARCH_PLACEHOLDER
Maintainer: $MAINTAINER
Depends: redis-server, clamav, clamav-daemon
Recommends: nginx
Section: net
Priority: optional
Homepage: https://github.com/PlusOne/hmac-file-server
Description: HMAC File Server v3.2 - Enterprise XMPP File Sharing
 A lightweight, secure file server designed for XMPP environments with
 enterprise-grade features including:
 .
  * HMAC-based authentication and JWT support
  * Redis integration for session management
  * ClamAV virus scanning for uploaded files
  * Prometheus metrics for monitoring
  * Chunked upload/download support
  * File deduplication capabilities
  * Comprehensive configuration validation
 .
 Perfect for Prosody, Ejabberd, and other XMPP servers requiring
 secure file sharing capabilities with professional deployment features.
EOF

# Prepare systemd service file
print_info "Creating systemd service configuration..."
cat <<EOF > $DEB_DIR/lib/systemd/system/hmac-file-server.service
[Unit]
Description=HMAC File Server 3.2
Documentation=https://github.com/PlusOne/hmac-file-server
After=network.target
Wants=network-online.target
After=redis.service
After=clamav-daemon.service

[Service]
Type=simple
User=hmac-file-server
Group=hmac-file-server
ExecStart=/usr/local/bin/hmac-file-server -config /etc/hmac-file-server/config.toml
ExecReload=/bin/kill -SIGHUP \$MAINPID
WorkingDirectory=/var/lib/hmac-file-server
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=hmac-file-server

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/hmac-file-server /var/log/hmac-file-server
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE

# Resource limits
LimitNOFILE=65536
LimitNPROC=4096

[Install]
WantedBy=multi-user.target
EOF

# Prepare example configuration file
print_info "Creating example configuration..."
cat <<EOF > $DEB_DIR/etc/hmac-file-server/config.toml
# HMAC File Server v3.2 Configuration
# Complete configuration reference: https://github.com/PlusOne/hmac-file-server/blob/main/WIKI.MD

[server]
bind_ip = "127.0.0.1"
listenport = "8080"
unixsocket = false
storagepath = "/var/lib/hmac-file-server/uploads"
metricsenabled = true
metricsport = "9090"
deduplicationenabled = true
deduplicationpath = "/var/lib/hmac-file-server/deduplication"
filenaming = "HMAC"
force_protocol = "auto"
sslenabled = false
pidfilepath = "/var/lib/hmac-file-server/runtime/hmac-file-server.pid"

[security]
secret = "CHANGE_THIS_SECRET_IN_PRODUCTION_USE_48_CHARS_MIN"
enablejwt = false
jwtsecret = ""
jwtalgorithm = "HS256"
jwtexpiration = "24h"

[uploads]
allowedextensions = [".txt", ".pdf", ".jpg", ".jpeg", ".png", ".gif", ".webp", ".zip", ".tar", ".gz", ".7z", ".mp4", ".webm", ".ogg", ".mp3", ".wav", ".flac", ".doc", ".docx", ".xls", ".xlsx", ".ppt", ".pptx", ".odt", ".ods", ".odp"]
maxfilesize = "100MB"
chunkeduploadsenabled = true
chunksize = "10MB"
resumableuploadsenabled = true
ttlenabled = false
ttl = "168h"

[downloads]
chunkeddownloadsenabled = true
chunksize = "10MB"

[logging]
level = "INFO"
file = "/var/log/hmac-file-server/hmac-file-server.log"
max_size = 100
max_backups = 3
max_age = 30
compress = true

[workers]
numworkers = 10
uploadqueuesize = 1000
autoscaling = true

[timeouts]
readtimeout = "30s"
writetimeout = "30s"
idletimeout = "120s"
shutdown = "30s"

[clamav]
enabled = false
socket = "/var/run/clamav/clamd.ctl"
timeout = "30s"

[redis]
enabled = false
address = "localhost:6379"
database = 0
password = ""
EOF

# Prepare post-installation script
print_info "Creating installation scripts..."
cat <<EOF > $DEB_DIR/DEBIAN/postinst
#!/bin/bash
set -e

# Create hmac-file-server user and group if they do not exist
if ! id -u hmac-file-server >/dev/null 2>&1; then
    useradd --system --no-create-home --shell /usr/sbin/nologin --home-dir /var/lib/hmac-file-server hmac-file-server
    echo "Created system user: hmac-file-server"
fi

# Set proper ownership and permissions
chown -R hmac-file-server:hmac-file-server /var/lib/hmac-file-server
chown -R hmac-file-server:hmac-file-server /var/log/hmac-file-server
chown hmac-file-server:hmac-file-server /etc/hmac-file-server/config.toml

# Set directory permissions
chmod 755 /var/lib/hmac-file-server
chmod 755 /var/lib/hmac-file-server/uploads
chmod 755 /var/lib/hmac-file-server/deduplication
chmod 755 /var/lib/hmac-file-server/runtime
chmod 755 /var/log/hmac-file-server
chmod 640 /etc/hmac-file-server/config.toml

# Reload systemd and enable service
systemctl daemon-reload
systemctl enable hmac-file-server.service

echo ""
echo "HMAC File Server v3.2 installed successfully!"
echo ""
echo "Next steps:"
echo "1. Edit /etc/hmac-file-server/config.toml (CHANGE THE SECRET!)"
echo "2. Enable Redis/ClamAV if needed: systemctl enable redis-server clamav-daemon"
echo "3. Start the service: systemctl start hmac-file-server"
echo "4. Check status: systemctl status hmac-file-server"
echo ""
echo "Documentation: https://github.com/PlusOne/hmac-file-server"
echo ""
EOF
chmod 0755 $DEB_DIR/DEBIAN/postinst

# Prepare pre-removal script
cat <<EOF > $DEB_DIR/DEBIAN/prerm
#!/bin/bash
set -e

# Stop the service before removal
if systemctl is-active --quiet hmac-file-server.service; then
    echo "Stopping HMAC File Server service..."
    systemctl stop hmac-file-server.service || true
fi
EOF
chmod 0755 $DEB_DIR/DEBIAN/prerm

# Prepare post-removal script
cat <<EOF > $DEB_DIR/DEBIAN/postrm
#!/bin/bash
set -e

case "\$1" in
    purge)
        # Remove systemd service
        systemctl disable hmac-file-server.service >/dev/null 2>&1 || true
        rm -f /lib/systemd/system/hmac-file-server.service
        systemctl daemon-reload >/dev/null 2>&1 || true

        # Remove user and group
        if id -u hmac-file-server >/dev/null 2>&1; then
            userdel hmac-file-server || true
        fi
        if getent group hmac-file-server >/dev/null 2>&1; then
            groupdel hmac-file-server || true
        fi

        # Remove data directories (ask user)
        echo ""
        echo "HMAC File Server has been removed."
        echo "Data directories remain at:"
        echo "  - /var/lib/hmac-file-server/"
        echo "  - /var/log/hmac-file-server/"
        echo "  - /etc/hmac-file-server/"
        echo ""
        echo "Remove them manually if no longer needed:"
        echo "  sudo rm -rf /var/lib/hmac-file-server"
        echo "  sudo rm -rf /var/log/hmac-file-server"
        echo "  sudo rm -rf /etc/hmac-file-server"
        echo ""
        ;;
    remove)
        # Just disable service
        systemctl disable hmac-file-server.service >/dev/null 2>&1 || true
        systemctl daemon-reload >/dev/null 2>&1 || true
        ;;
esac
EOF
chmod 0755 $DEB_DIR/DEBIAN/postrm

# Prepare documentation
print_info "Including documentation..."
cp README.MD $DEB_DIR/usr/share/doc/hmac-file-server/
cp INSTALL.MD $DEB_DIR/usr/share/doc/hmac-file-server/
cp WIKI.MD $DEB_DIR/usr/share/doc/hmac-file-server/
cp CHANGELOG.MD $DEB_DIR/usr/share/doc/hmac-file-server/
cp config-example-xmpp.toml $DEB_DIR/usr/share/doc/hmac-file-server/

# Create .deb packages
print_status "Building Debian packages..."
for ARCH in amd64 arm64; do
    print_info "Creating package for $ARCH..."
    
    # Update control file for the current architecture
    sed "s/ARCH_PLACEHOLDER/$ARCH/" $CONTROL_TEMPLATE > $DEB_DIR/DEBIAN/control

    # Copy binary for current architecture
    cp $BUILD_DIR/$ARCH/hmac-file-server $DEB_DIR/usr/local/bin/

    # Calculate installed size
    INSTALLED_SIZE=$(du -sk $DEB_DIR | cut -f1)
    echo "Installed-Size: $INSTALLED_SIZE" >> $DEB_DIR/DEBIAN/control

    # Ensure proper permissions
    find $DEB_DIR -type d -exec chmod 755 {} \;
    find $DEB_DIR -type f -exec chmod 644 {} \;
    chmod 0755 $DEB_DIR/usr/local/bin/hmac-file-server
    chmod 0755 $DEB_DIR/DEBIAN/postinst
    chmod 0755 $DEB_DIR/DEBIAN/prerm
    chmod 0755 $DEB_DIR/DEBIAN/postrm

    # Build the .deb package
    PACKAGE_FILE="${PACKAGE_NAME}_${VERSION}_${ARCH}.deb"
    if dpkg-deb --build $DEB_DIR $PACKAGE_FILE; then
        SIZE=$(stat -c%s "$PACKAGE_FILE" | awk '{printf "%.1fMB", $1/1024/1024}')
        print_info "   Package created: $PACKAGE_FILE ($SIZE)"
    else
        print_error "Failed to create package for $ARCH"
        exit 1
    fi
    
    # Clean up binary for next build
    rm -f $DEB_DIR/usr/local/bin/hmac-file-server
    rm -f $DEB_DIR/DEBIAN/control
done

# Cleanup temporary directories
print_info "Cleaning up build directories..."
rm -rf $BUILD_DIR $DEB_DIR

# Show results
print_status "Debian package build completed!"
echo ""
print_info "Generated packages:"
for PACKAGE in ${PACKAGE_NAME}_${VERSION}_*.deb; do
    if [[ -f "$PACKAGE" ]]; then
        SIZE=$(stat -c%s "$PACKAGE" | awk '{printf "%.1fMB", $1/1024/1024}')
        print_info "   $PACKAGE ($SIZE)"
    fi
done

echo ""
print_info "Installation commands:"
echo "   sudo dpkg -i ${PACKAGE_NAME}_${VERSION}_amd64.deb"
echo "   sudo dpkg -i ${PACKAGE_NAME}_${VERSION}_arm64.deb"
echo ""
print_info "Package information:"
echo "   dpkg -I ${PACKAGE_NAME}_${VERSION}_amd64.deb"
echo "   dpkg -c ${PACKAGE_NAME}_${VERSION}_amd64.deb"
echo ""
print_warning "Remember to:"
echo "   1. Edit /etc/hmac-file-server/config.toml"
echo "   2. Change the default secret"
echo "   3. Configure Redis/ClamAV if needed"
echo "   4. Start the service: systemctl start hmac-file-server"

exit 0