#!/bin/bash

cat << "EOF"
  ██████╗██╗  ██╗ █████╗ ███╗   ██╗ ██████╗ ███████╗
 ██╔════╝██║  ██║██╔══██╗████╗  ██║██╔════╝ ██╔════╝
 ██║     ███████║███████║██╔██╗ ██║██║  ███╗█████╗  
 ██║     ██╔══██║██╔══██║██║╚██╗██║██║   ██║██╔══╝  
 ╚██████╗██║  ██║██║  ██║██║ ╚████║╚██████╔╝███████╗
  ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═══╝ ╚═════╝ ╚══════╝
                                                    
 ███╗   ███╗ █████╗ ██╗  ██╗███████╗██████╗ 
 ████╗ ████║██╔══██╗██║ ██╔╝██╔════╝██╔══██╗
 ██╔████╔██║███████║█████╔╝ █████╗  ██████╔╝
 ██║╚██╔╝██║██╔══██║██╔═██╗ ██╔══╝  ██╔══██╗
 ██║ ╚═╝ ██║██║  ██║██║  ██╗███████╗██║  ██║
 ╚═╝     ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝
                        Configuration Wizard
EOF

# Get the absolute path of the script directory
SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
ENV_FILE="$SCRIPT_DIR/.env"

echo "Looking for .env file at: $ENV_FILE"

# Check if .env file exists
if [ ! -f "$ENV_FILE" ]; then
  echo "Error: .env file not found at $ENV_FILE"
  echo "Creating a backup plan - searching for .env in current directory..."
  
  if [ -f ".env" ]; then
    ENV_FILE=".env"
    echo "Found .env in current directory. Using: $ENV_FILE"
  else
    echo "Still no .env file found. Please make sure the .env file exists."
    exit 1
  fi
fi

# Function to create a timestamped backup of the .env file
backup_env_file() {
  local timestamp=$(date +"%Y%m%d_%H%M%S")
  local backup_file="$ENV_FILE.backup_$timestamp"
  
  echo "Creating backup of current .env file to: $backup_file"
  if cp "$ENV_FILE" "$backup_file"; then
    echo "Backup created successfully!"
    return 0
  else
    echo "Failed to create backup file. Proceeding with caution..."
    return 1
  fi
}

# Create a backup of the current .env file before making any changes
backup_env_file

# Function to generate a random secure password
generate_password() {
  local length=${1:-16}
  openssl rand -base64 48 | tr -dc 'a-zA-Z0-9!@#$%^&*()-_=+' | head -c "$length"
}

# Function to generate a base64 encoded key for Monica
generate_base64_key() {
  local length=${1:-32}
  local key=$(openssl rand -base64 48 | tr -dc 'a-zA-Z0-9!@#$%^&*()-_=+' | head -c "$length")
  echo "base64:$(echo -n "$key" | base64)"
}

# Function to safely update environment variables in .env file
update_env_var() {
  local key=$1
  local value=$2
  local escaped_value=$(echo "$value" | sed 's/[\/&]/\\&/g')
  
  # Make a temporary backup of the .env file before modification
  # Adding "_tmp" to distinguish from the main backup
  cp "$ENV_FILE" "$ENV_FILE.bak_tmp"
  
  if grep -q "^$key=" "$ENV_FILE"; then
    # Use perl instead of sed for better handling of paths with spaces
    perl -i -pe "s/^$key=.*/$key=$escaped_value/" "$ENV_FILE"
    echo "Updated $key in .env file"
  else
    echo "$key=$escaped_value" >> "$ENV_FILE"
    echo "Added $key to .env file"
  fi
  
  # Check if update was successful
  if ! grep -q "^$key=$escaped_value" "$ENV_FILE"; then
    echo "Warning: Failed to update $key in .env file"
    echo "Restoring from backup..."
    cp "$ENV_FILE.bak_tmp" "$ENV_FILE"
    echo "Will try alternative method..."
    
    # Alternative update method
    local temp_file=$(mktemp)
    if grep -q "^$key=" "$ENV_FILE"; then
      while IFS= read -r line; do
        if [[ $line =~ ^$key= ]]; then
          echo "$key=$value" >> "$temp_file"
        else
          echo "$line" >> "$temp_file"
        fi
      done < "$ENV_FILE"
    else
      cat "$ENV_FILE" > "$temp_file"
      echo "$key=$value" >> "$temp_file"
    fi
    
    mv "$temp_file" "$ENV_FILE"
  fi
  
  # Remove the temporary backup file after successful update
  rm -f "$ENV_FILE.bak_tmp"
}

echo -e "\n\nWelcome to Changemaker Config!\n"
echo "This script will help you configure your Changemaker instance."
echo "Please provide the following information:"

# Domain configuration
read -p "Enter your domain name (without protocol, e.g., example.com): " domain_name

if [ -z "$domain_name" ]; then
  echo "Domain name cannot be empty. Using default: changeme.org"
  domain_name="changeme.org"
fi

echo -e "\nUpdating domain settings in .env file at: $ENV_FILE"

# Update main domain settings
update_env_var "DOMAIN" "$domain_name"
update_env_var "BASE_DOMAIN" "https://$domain_name"

# Update Listmonk hostname
update_env_var "LISTMONK_HOSTNAME" "listmonk.$domain_name"

# Update Gitea settings
update_env_var "GITEA_ROOT_URL" "https://gitea.$domain_name"
update_env_var "GITEA_DOMAIN" "gitea.$domain_name"

# Update Excalidraw settings
update_env_var "EXCALIDRAW_PUBLIC_URL" "https://excalidraw.$domain_name"
update_env_var "EXCALIDRAW_PUBLIC_SOCKET_URL" "https://excalidraw.$domain_name"

# Update OpenWebUI settings
echo -e "\nConfiguring OpenWebUI..."
update_env_var "OPEN_WEBUI_PORT" "3005"
update_env_var "OPEN_WEBUI_URL" "https://open-webui.$domain_name"

echo -e "Domain settings have been updated successfully!\n"

# Listmonk Admin Credentials configuration
echo -e "\n---- Listmonk Admin Credentials ----"
read -p "Enter Listmonk admin username [default: admin]: " listmonk_user
read -sp "Enter Listmonk admin password [default: strongpassword]: " listmonk_password
echo # Add new line after password input

if [ -z "$listmonk_user" ]; then
  echo "Using default Listmonk admin username: admin"
  listmonk_user="admin"
fi

if [ -z "$listmonk_password" ]; then
  echo "Using default Listmonk admin password"
  listmonk_password="strongpassword"
fi

# Update Listmonk credentials
update_env_var "LISTMONK_ADMIN_USER" "$listmonk_user"
update_env_var "LISTMONK_ADMIN_PASSWORD" "$listmonk_password"

echo "Listmonk admin credentials updated."

# Flatnotes User Credentials configuration
echo -e "\n---- Flatnotes User Credentials ----"
read -p "Enter Flatnotes username [default: user]: " flatnotes_user
read -sp "Enter Flatnotes password [default: changeMe!]: " flatnotes_password
echo # Add new line after password input

if [ -z "$flatnotes_user" ]; then
  echo "Using default Flatnotes username: user"
  flatnotes_user="user"
fi

if [ -z "$flatnotes_password" ]; then
  echo "Using default Flatnotes password"
  flatnotes_password="changeMe!"
fi

# Update Flatnotes credentials
update_env_var "FLATNOTES_USERNAME" "$flatnotes_user"
update_env_var "FLATNOTES_PASSWORD" "$flatnotes_password"

echo "Flatnotes user credentials updated."

# N8N User Credentials configuration
echo -e "\n---- N8N Admin Credentials ----"
read -p "Enter N8N admin email [default: admin@example.com]: " n8n_email
read -sp "Enter N8N admin password [default: changeMe]: " n8n_password
echo # Add new line after password input

if [ -z "$n8n_email" ]; then
  echo "Using default N8N admin email: admin@example.com"
  n8n_email="admin@example.com"
fi

if [ -z "$n8n_password" ]; then
  echo "Using default N8N admin password"
  n8n_password="changeMe"
fi

# Update N8N host and other settings
update_env_var "N8N_HOST" "n8n.$domain_name"
update_env_var "N8N_USER_EMAIL" "$n8n_email"
update_env_var "N8N_USER_PASSWORD" "$n8n_password"
update_env_var "GENERIC_TIMEZONE" "UTC"

echo "N8N admin credentials updated."

# Rocket.Chat Configuration
echo -e "\n---- Rocket.Chat Configuration ----"
read -p "Enter Rocket.Chat URL (default: https://rocket.$domain_name): " rocketchat_url
read -p "Enter Rocket.Chat port [default: 3004]: " rocketchat_port
read -p "Enable production mode for Rocket.Chat? [Y/n]: " rocketchat_production

if [ -z "$rocketchat_url" ]; then
  echo "Using default Rocket.Chat URL: https://rocket.$domain_name"
  rocketchat_url="https://rocket.$domain_name"
fi

if [ -z "$rocketchat_port" ]; then
  echo "Using default Rocket.Chat port: 3004"
  rocketchat_port="3004"
fi

rocketchat_environment="changemaker"
if [[ "$rocketchat_production" =~ ^[Yy]$ ]] || [ -z "$rocketchat_production" ]; then
  echo "Enabling production mode for Rocket.Chat"
  rocketchat_environment="production"
fi

# Update Rocket.Chat settings
update_env_var "ROCKETCHAT_PORT" "$rocketchat_port"
update_env_var "ROCKETCHAT_CONTAINER_PORT" "3000"
update_env_var "ROCKETCHAT_ROOT_URL" "$rocketchat_url"
update_env_var "ROCKETCHAT_DEPLOYMENT_ENVIRONMENT" "$rocketchat_environment"

echo "Rocket.Chat configuration updated."

# Cloudflare Credentials Configuration
echo -e "\n---- Cloudflare Credentials Configuration ----"
echo "Please enter your Cloudflare credentials for DNS and tunnel management."

read -p "Enter Cloudflare authentication email: " cf_auth_email
read -p "Enter Cloudflare API token: " cf_api_token
read -p "Enter Cloudflare Zone ID: " cf_zone_id
read -p "Enter Cloudflare Tunnel ID: " cf_tunnel_id

if [ -z "$cf_auth_email" ]; then
  echo "Warning: Cloudflare authentication email is empty. Some features may not work correctly."
fi

if [ -z "$cf_api_token" ]; then
  echo "Warning: Cloudflare API token is empty. Some features may not work correctly."
fi

if [ -z "$cf_zone_id" ]; then
  echo "Warning: Cloudflare Zone ID is empty. Some features may not work correctly."
fi

if [ -z "$cf_tunnel_id" ]; then
  echo "Warning: Cloudflare Tunnel ID is empty. Some features may not work correctly."
fi

# Update Cloudflare settings
update_env_var "CF_AUTH_EMAIL" "$cf_auth_email"
update_env_var "CF_API_TOKEN" "$cf_api_token"
update_env_var "CF_ZONE_ID" "$cf_zone_id"
update_env_var "CF_TUNNEL_ID" "$cf_tunnel_id"
update_env_var "CF_DOMAIN" "$domain_name"

echo "Cloudflare credentials have been updated."

echo -e "\n---- Generating Random Strong Passwords ----"
echo "Generating and updating passwords for all other services..."

# Generate and update Monica app key
monica_app_key=$(generate_base64_key 32)
update_env_var "MONICA_APP_KEY" "$monica_app_key"

# Generate and update Monica passwords
monica_db_password=$(generate_password 20)
update_env_var "MONICA_DB_PASSWORD" "$monica_db_password"
update_env_var "MONICA_MYSQL_PASSWORD" "$monica_db_password"

# Generate and update Flatnotes secret key
flatnotes_secret_key=$(generate_password 32)
update_env_var "FLATNOTES_SECRET_KEY" "$flatnotes_secret_key"

# Generate and update Gitea passwords
gitea_db_password=$(generate_password 24)
gitea_root_password=$(generate_password 24)
update_env_var "GITEA_DB_PASSWD" "$gitea_db_password"
update_env_var "GITEA_DB_ROOT_PASSWORD" "$gitea_root_password"

# Generate and update NocoDB JWT secret and database password
nocodb_jwt_secret=$(generate_password 32)
update_env_var "NOCODB_JWT_SECRET" "$nocodb_jwt_secret"

nocodb_db_password=$(generate_password 20)
update_env_var "NOCODB_DB_PASSWORD" "$nocodb_db_password"

# Generate and update n8n encryption key and default admin password
n8n_encryption_key=$(generate_password 32)
update_env_var "N8N_ENCRYPTION_KEY" "$n8n_encryption_key"

# Generate and update ConvertX JWT secret
convertx_jwt_secret=$(generate_password 48)
update_env_var "CONVERTX_JWT_SECRET" "$convertx_jwt_secret"

echo "All service passwords have been updated with secure random strings."

echo -e "\nAll settings have been configured successfully!"
echo "Your Changemaker instance is now ready with the following:"
echo "- Domain: $domain_name"
echo "- Listmonk Admin: $listmonk_user"
echo "- Flatnotes User: $flatnotes_user"
echo "- N8N Admin Email: $n8n_email"
echo "- All other service passwords have been randomized for security"
echo -e "\nNote: The randomized passwords are stored in your .env file at: $ENV_FILE"
echo -e "A backup of your original .env file was created before modifications."

# Add a new function to write the complete .env file
write_new_env_file() {
  local timestamp=$(date +"%Y%m%d_%H%M%S")
  local backup_file="$ENV_FILE.backup_$timestamp"
  
  echo "Creating final backup of the current .env file to: $backup_file"
  cp "$ENV_FILE" "$backup_file"
  
  echo "Creating new .env file with all updated settings..."
  
  # Get all variables from the current .env file
  local temp_env=$(mktemp)
  grep -v "^#" "$ENV_FILE" | grep "=" > "$temp_env"
  
  # Create the new .env file with header
  cat > "$ENV_FILE.new" << EOL
# Never share this file publicly. It contains sensitive information.
# This file is used to configure various applications and services.
# Generated by Changemaker Config Wizard on $(date)

EOL

  # Add all sections with their variables
  echo "# Domain Configuration" >> "$ENV_FILE.new"
  grep -E "^DOMAIN=|^BASE_DOMAIN=" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Listmonk Configuration" >> "$ENV_FILE.new"
  grep -E "^LISTMONK_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Database Credentials" >> "$ENV_FILE.new"
  grep -E "^POSTGRES_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Monica CRM Configuration" >> "$ENV_FILE.new"
  grep -E "^MONICA_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# MkDocs Configuration" >> "$ENV_FILE.new"
  grep -E "^USER_ID=|^GROUP_ID=|^MKDOCS_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Flatnotes Configuration" >> "$ENV_FILE.new"
  grep -E "^FLATNOTES_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Gitea Configuration" >> "$ENV_FILE.new"
  grep -E "^GITEA_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Apache Answer Configuration" >> "$ENV_FILE.new"
  grep -E "^ANSWER_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Excalidraw Configuration" >> "$ENV_FILE.new"
  grep -E "^EXCALIDRAW_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Code Server Configuration" >> "$ENV_FILE.new"
  grep -E "^CODE_SERVER_|^USER_NAME=" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Cloudflare Credentials" >> "$ENV_FILE.new"
  grep -E "^CF_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# NocoDB Configuration" >> "$ENV_FILE.new"
  grep -E "^NOCODB_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# OpenWebUI Configuration" >> "$ENV_FILE.new"
  grep -E "^OPEN_WEBUI_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# N8N Configuration" >> "$ENV_FILE.new"
  grep -E "^N8N_|^GENERIC_TIMEZONE=" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# ConvertX Configuration" >> "$ENV_FILE.new"
  grep -E "^CONVERTX_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  echo "# Rocket.Chat Configuration" >> "$ENV_FILE.new"
  grep -E "^ROCKETCHAT_" "$temp_env" >> "$ENV_FILE.new"
  echo "" >> "$ENV_FILE.new"
  
  # Any variables that didn't fit in the above categories
  echo "# Additional Configuration" >> "$ENV_FILE.new"
  grep -v -E "^DOMAIN=|^BASE_DOMAIN=|^LISTMONK_|^POSTGRES_|^MONICA_|^USER_ID=|^GROUP_ID=|^MKDOCS_|^FLATNOTES_|^GITEA_|^ANSWER_|^EXCALIDRAW_|^CODE_SERVER_|^USER_NAME=|^CF_|^NOCODB_|^OPEN_WEBUI_|^N8N_|^GENERIC_TIMEZONE=|^CONVERTX_|^ROCKETCHAT_" "$temp_env" >> "$ENV_FILE.new"
  
  # Replace the current .env with the new one
  mv "$ENV_FILE.new" "$ENV_FILE"
  
  # Clean up
  rm -f "$temp_env"
  
  echo "New .env file created and applied successfully!"
}

# Finalizing the configuration by creating a clean .env file...
echo -e "\nFinalizing the configuration by creating a clean .env file..."
write_new_env_file

# Clean up any leftover temporary backup files
rm -f "$ENV_FILE.bak_tmp"
echo -e "Temporary backup files have been cleaned up."