#!/bin/bash
#
# Setup script for Post-ERG admin password
# Creates htpasswd file for nginx basic authentication
#

set -e

echo "================================================="
echo "Post-ERG Admin Password Setup"
echo "================================================="
echo ""

# Check if running as root
if [ "$EUID" -ne 0 ]; then
    echo "⚠️  This script must be run as root (use sudo)"
    exit 1
fi

# Check if apache2-utils is installed
if ! command -v htpasswd &> /dev/null; then
    echo "📦 Installing apache2-utils..."
    apt-get update
    apt-get install -y apache2-utils
fi

# Configuration
HTPASSWD_FILE="/etc/nginx/.htpasswd-posterg"
BACKUP_FILE="/etc/nginx/.htpasswd-posterg.backup"

# Backup existing file if it exists
if [ -f "$HTPASSWD_FILE" ]; then
    echo "📋 Backing up existing password file..."
    cp "$HTPASSWD_FILE" "$BACKUP_FILE"
    echo "   Backup saved to: $BACKUP_FILE"
    echo ""
fi

# Prompt for username
echo "Enter admin username (default: admin):"
read -r USERNAME
USERNAME=${USERNAME:-admin}

# Create or update password file
if [ -f "$HTPASSWD_FILE" ]; then
    # File exists, update/add user
    echo ""
    echo "Creating/updating user: $USERNAME"
    htpasswd "$HTPASSWD_FILE" "$USERNAME"
else
    # Create new file
    echo ""
    echo "Creating new password file for user: $USERNAME"
    htpasswd -c "$HTPASSWD_FILE" "$USERNAME"
fi

# Set correct permissions
chmod 644 "$HTPASSWD_FILE"
chown root:root "$HTPASSWD_FILE"

echo ""
echo "✅ Password file created/updated successfully!"
echo ""
echo "Details:"
echo "  File: $HTPASSWD_FILE"
echo "  User: $USERNAME"
echo "  Permissions: 644 (readable by nginx)"
echo ""

# Ask if user wants to add more users
echo "Do you want to add another user? (y/n)"
read -r ADD_MORE

while [ "$ADD_MORE" = "y" ] || [ "$ADD_MORE" = "Y" ]; do
    echo ""
    echo "Enter username for additional user:"
    read -r USERNAME

    if [ -z "$USERNAME" ]; then
        echo "❌ Username cannot be empty"
        continue
    fi

    echo "Adding user: $USERNAME"
    htpasswd "$HTPASSWD_FILE" "$USERNAME"

    echo ""
    echo "Add another user? (y/n)"
    read -r ADD_MORE
done

echo ""
echo "================================================="
echo "Setup Complete!"
echo "================================================="
echo ""
echo "Current users in $HTPASSWD_FILE:"
cut -d: -f1 "$HTPASSWD_FILE" | while read -r user; do
    echo "  - $user"
done
echo ""
echo "Next steps:"
echo "  1. Copy nginx config: cp nginx/posterg.conf /etc/nginx/sites-available/posterg"
echo "  2. Enable site: ln -s /etc/nginx/sites-available/posterg /etc/nginx/sites-enabled/"
echo "  3. Test config: nginx -t"
echo "  4. Reload nginx: systemctl reload nginx"
echo ""
echo "The admin panel at /formulaire/ will now require authentication."
echo ""
echo "⚠️  IMPORTANT: Save these credentials securely!"
echo ""