#!/bin/sh
set -eu

if [ "$#" -ne 0 ]; then
    echo "init.sh does not accept arguments. Install custom Python dependencies with asp-custom-deps." >&2
    exit 2
fi

mkdir -p \
    certs \
    custom/data/modules \
    custom/data/playbooks \
    custom/data/siem \
    custom/modules \
    custom/playbooks \
    logs/nginx

if [ ! -e custom/requirements.txt ]; then
    cat > custom/requirements.txt <<'EOF'
# Add Python packages required by custom Module or Playbook scripts.
# Example:
# requests==2.32.5
EOF
fi

generate_secret() {
    if command -v openssl >/dev/null 2>&1; then
        openssl rand -hex 32
        return
    fi
    if command -v python3 >/dev/null 2>&1; then
        python3 -c 'import secrets; print(secrets.token_hex(32))'
        return
    fi
    od -An -N32 -tx1 /dev/urandom | tr -d ' \n'
}

set_env_value() {
    key="$1"
    value="$2"
    if grep -q "^${key}=" .env; then
        sed -i "s|^${key}=.*|${key}=${value}|" .env
    else
        printf '%s=%s\n' "$key" "$value" >> .env
    fi
}

if [ ! -e compose.override.yaml ]; then
    cat > compose.override.yaml <<'EOF'
# User-managed Docker Compose overrides.
# ASP upgrades never overwrite this file.
# Keep supported passwords, ports, and image settings in .env.
# Replace the empty services mapping below when service-level overrides are needed.
#
# services:
#   asp-web:
#     environment:
#       EXAMPLE_SETTING: value
services: {}
EOF
fi

if [ ! -f .env ]; then
    cp .env.example .env
    postgres_password="$(generate_secret)"
    redis_password="$(generate_secret)"
    rustfs_secret="$(generate_secret)"

    set_env_value DJANGO_SECRET_KEY "$(generate_secret)"
    set_env_value POSTGRES_PASSWORD "$postgres_password"
    set_env_value REDIS_PASSWORD "$redis_password"
    set_env_value RUSTFS_SECRET_KEY "$rustfs_secret"
    echo "Generated .env with random service secrets. Review .env before exposing the deployment."
fi

if grep -Eq '^(DJANGO_SECRET_KEY|POSTGRES_PASSWORD|REDIS_PASSWORD|RUSTFS_SECRET_KEY)=change-me' .env; then
    echo "Refusing to initialize with placeholder secrets in .env. Delete .env to regenerate or update the values manually."
    exit 1
fi

docker compose pull

docker compose run --rm asp-migrate
docker compose up -d

echo "ASP is starting. Run ./scripts/doctor.sh to verify the deployment."
echo "Create an administrator when needed:"
echo "  docker compose exec asp-web python manage.py createsuperuser"