#!/bin/bash

# To be run by user mkt to create the EspoCRM pod (MariaDB + web + scheduler
# daemon) as a rootless Podman pod and to create/enable the systemd --user
# services for autostart. Podman 4.3.1 (no Quadlet): uses
# `podman generate systemd --files --new`.

# Environment variables
POD_NAME='espocrm_pod'
DB_CTR='mariadb_ctr'
WEB_CTR='espocrm_ctr'
DAEMON_CTR='espocrm_daemon_ctr'

ESPO_IMAGE='docker.io/espocrm/espocrm:9.3.8'
DB_IMAGE='docker.io/library/mariadb:11.4.12'

HOST_LOCAL_IP='127.0.0.1'
WEB_HOST_PORT='8093'   # -> container port 80  (EspoCRM web)
DB_HOST_PORT='8094'    # -> container port 3306 (host-side DB access)

NET_OPTS='slirp4netns:allow_host_loopback=true,port_handler=slirp4netns'

# Data (bind mounts, no named volumes)
BIND_DIR="$HOME/.local/share/$POD_NAME"
DB_DATA_DIR="$BIND_DIR/mariadb"     # -> /var/lib/mysql
ESPO_DATA_DIR="$BIND_DIR/espocrm"   # -> /var/www/html

# systemd --user paths
USER_SYSTEMD_DIR="$HOME/.config/systemd/user"
WEB_UNIT_FILE="$USER_SYSTEMD_DIR/container-${WEB_CTR}.service"
DAEMON_UNIT_FILE="$USER_SYSTEMD_DIR/container-${DAEMON_CTR}.service"

# Credentials (plaintext deliberately accepted: private repo / company secret)
MARIADB_ROOT_PASSWORD='KqHZUEih4FQY9bTX1VqjS2VbrScrYyi+'
ESPOCRM_DB_PASSWORD='hsILtz+BLs/+8T8MEjO9tIt4fDPPRgB7'
ESPOCRM_ADMIN_PASSWORD='Mb5/toETVFzdn+kX6iRxllzXNbcIQIUT'

DB_NAME='espocrm'
DB_USER='espocrm'
ADMIN_USER='admin'
SITE_URL="http://${HOST_LOCAL_IP}:${WEB_HOST_PORT}"

# Prepare directories
mkdir -p "$DB_DATA_DIR" "$ESPO_DATA_DIR" "$USER_SYSTEMD_DIR"

# Create pod if not yet existing
if ! podman pod exists "$POD_NAME"; then
  podman pod create \
    -n "$POD_NAME" \
    --network "$NET_OPTS" \
    -p ${HOST_LOCAL_IP}:${WEB_HOST_PORT}:80 \
    -p ${HOST_LOCAL_IP}:${DB_HOST_PORT}:3306
  echo "Pod '$POD_NAME' created (rc=$?)"
else
  echo "Pod '$POD_NAME' already exists."
fi

# MariaDB container (start first)
podman rm -f "$DB_CTR"
podman run -d --name "$DB_CTR" --pod "$POD_NAME" \
  -e MARIADB_ROOT_PASSWORD="$MARIADB_ROOT_PASSWORD" \
  -e MARIADB_DATABASE="$DB_NAME" \
  -e MARIADB_USER="$DB_USER" \
  -e MARIADB_PASSWORD="$ESPOCRM_DB_PASSWORD" \
  -v "$DB_DATA_DIR":/var/lib/mysql \
  "$DB_IMAGE" \
  --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
echo "Started $DB_CTR container (rc=$?)"

# Wait for the DB to be ready
echo "Waiting for MariaDB to be ready..."
for i in $(seq 1 60); do
  podman exec "$DB_CTR" mariadb-admin ping --silent >/dev/null 2>&1 && break
  sleep 2
done
echo "MariaDB ping ready (rc=$?)"

# EspoCRM web container (start after the DB)
podman rm -f "$WEB_CTR"
podman run -d --name "$WEB_CTR" --pod "$POD_NAME" \
  -e ESPOCRM_DATABASE_PLATFORM=Mysql \
  -e ESPOCRM_DATABASE_HOST="$HOST_LOCAL_IP" \
  -e ESPOCRM_DATABASE_PORT=3306 \
  -e ESPOCRM_DATABASE_NAME="$DB_NAME" \
  -e ESPOCRM_DATABASE_USER="$DB_USER" \
  -e ESPOCRM_DATABASE_PASSWORD="$ESPOCRM_DB_PASSWORD" \
  -e ESPOCRM_ADMIN_USERNAME="$ADMIN_USER" \
  -e ESPOCRM_ADMIN_PASSWORD="$ESPOCRM_ADMIN_PASSWORD" \
  -e ESPOCRM_SITE_URL="$SITE_URL" \
  -e ESPOCRM_CONFIG_USE_WEB_SOCKET=false \
  -v "$ESPO_DATA_DIR":/var/www/html \
  "$ESPO_IMAGE"
echo "Started $WEB_CTR container (rc=$?)"

# Wait for EspoCRM install/response (HTTP 200/302, max ~3 min)
echo "Waiting for EspoCRM to install and respond..."
for i in $(seq 1 90); do
  code=$(curl -s -o /dev/null -w '%{http_code}' "${SITE_URL}/" 2>/dev/null)
  case "$code" in
    200|302) break ;;
  esac
  sleep 2
done
echo "EspoCRM responded with HTTP $code (rc=$?)"

# Rebuild EspoCRM cache so customizations on the persisted bind-mount take effect
# and the client cacheTimestamp is bumped (forces browsers to reload custom views,
# e.g. custom field views like the signature image button). The image entrypoint
# does NOT rebuild on a normal same-version restart, so without this a recreate
# keeps serving a stale client cache. Done here in the live phase where the DB is
# already confirmed up (the systemd-managed phase has a start-up race on the DB).
# The bumped cacheTimestamp and rebuilt cache persist on the bind-mount into the
# systemd-managed instance.
podman exec -u www-data "$WEB_CTR" php command.php rebuild
echo "Rebuilt EspoCRM cache (rc=$?)"

# EspoCRM scheduler/daemon container (start last; reads data/config.php)
podman rm -f "$DAEMON_CTR"
podman run -d --name "$DAEMON_CTR" --pod "$POD_NAME" \
  --entrypoint docker-daemon.sh \
  -v "$ESPO_DATA_DIR":/var/www/html \
  "$ESPO_IMAGE"
echo "Started $DAEMON_CTR container (rc=$?)"

# Generate systemd service files
cd "$USER_SYSTEMD_DIR"
podman generate systemd --files --new --name "$POD_NAME"
echo "Generated systemd service files (rc=$?)"

# Enforce start order: web waits for DB port, daemon waits for web port.
# Insert an ExecStartPre wait loop immediately BEFORE the container run line.
awk -v ip="$HOST_LOCAL_IP" -v port="$DB_HOST_PORT" '
BEGIN { inserted=0 }
/^ExecStart=\/usr\/bin\/podman run/ && inserted==0 {
  print "ExecStartPre=/bin/bash -ceu \047for i in $(seq 1 60); do (exec 3<>/dev/tcp/" ip "/" port ") 2>/dev/null && exit 0; sleep 2; done; echo \"dep " ip ":" port " not up\" >&2; exit 1\047"
  inserted=1
}
{ print }
' "$WEB_UNIT_FILE" > "${WEB_UNIT_FILE}.tmp"
mv "${WEB_UNIT_FILE}.tmp" "$WEB_UNIT_FILE"
echo "Injected DB readiness check (${HOST_LOCAL_IP}:${DB_HOST_PORT}) into ${WEB_CTR} unit"

awk -v ip="$HOST_LOCAL_IP" -v port="$WEB_HOST_PORT" '
BEGIN { inserted=0 }
/^ExecStart=\/usr\/bin\/podman run/ && inserted==0 {
  print "ExecStartPre=/bin/bash -ceu \047for i in $(seq 1 90); do (exec 3<>/dev/tcp/" ip "/" port ") 2>/dev/null && exit 0; sleep 2; done; echo \"dep " ip ":" port " not up\" >&2; exit 1\047"
  inserted=1
}
{ print }
' "$DAEMON_UNIT_FILE" > "${DAEMON_UNIT_FILE}.tmp"
mv "${DAEMON_UNIT_FILE}.tmp" "$DAEMON_UNIT_FILE"
echo "Injected web readiness check (${HOST_LOCAL_IP}:${WEB_HOST_PORT}) into ${DAEMON_CTR} unit"

# Stop & remove the live pod and containers
podman pod stop --time 15 "$POD_NAME"
podman pod rm -f --ignore "$POD_NAME"
if podman pod exists "$POD_NAME"; then
  echo "ERROR: Pod $POD_NAME still exists."
  exit 1
else
  echo "Stopped & removed live pod $POD_NAME and containers"
fi

# Enable systemd services (the systemd-managed instance is what runs in the end)
systemctl --user daemon-reload
systemctl --user enable --now "pod-${POD_NAME}.service"
echo "Enabled systemd service pod-${POD_NAME}.service (rc=$?)"
systemctl --user enable --now "container-${DB_CTR}.service"
echo "Enabled systemd service container-${DB_CTR}.service (rc=$?)"
systemctl --user enable --now "container-${WEB_CTR}.service"
echo "Enabled systemd service container-${WEB_CTR}.service (rc=$?)"
systemctl --user enable --now "container-${DAEMON_CTR}.service"
echo "Enabled systemd service container-${DAEMON_CTR}.service (rc=$?)"

# Closing hints
echo ""
echo "EspoCRM is reachable at ${SITE_URL}  (admin / see ESPOCRM_ADMIN_PASSWORD)"
echo "Status:    systemctl --user status pod-${POD_NAME}.service"
echo "Status:    systemctl --user status container-${DB_CTR}.service container-${WEB_CTR}.service container-${DAEMON_CTR}.service"
echo "View logs: journalctl --user -u container-${WEB_CTR}.service -f"