#!/usr/bin/env bash
# MySQL-BU - MySQL Backup Scripts

action="$1"
VERS='1.01272019'
CERT_DAEMON='/usr/bin/certbot'

source /opt/idssys/nodemgmt/settings.conf
source /opt/idssys/defaults/colors.inc
source /opt/idssys/defaults/default.inc

if [ "$1" = "service" ] || [ "$1" = "set-permissions" ]; then
	NODE_HOSTS=`${ids_mysql_conn} -s -N -e "SELECT value FROM idssys.nodemgmt WHERE var = 'NODE_HOSTS'"`
fi

IFS=,
NODE_HOSTS=(${NODE_HOSTS})
unset IFS

# ========================================================= #

case "$1" in
	service)
		if [ "$2" = "nginx" ];			then SER='NGINX'
			elif [ "$2" = "haproxy" ];	then SER='HAProxy'
			elif [ "$2" = "gogs" ];		then SER='Gogs'
		fi
		if [ "$3" = "stop" ]; then ADISP='Stopp'; else ADISP="$(tr '[:lower:]' '[:upper:]' <<< ${3:0:1})${3:1}"; fi
		if [ "$3" = "start" ] &&  [ "$2" = "haproxy" ]; then TACT='restart'; else TACT="${3}"; fi
			
		echo -e "${idsCL[LightGreen]}[[${SER} ${ADISP}ing]]${idsCL[Default]}"
		echo -e "${idsCL[LightGreen]}-------------------------------------------${idsCL[Default]}"
		
		nid=1
		for nip in "${NODE_HOSTS[@]}"
		do
			echo -en "${ADISP}ing Node ${nid} ($nip)...${idsCL[Default]}"
			ssh root@${nip} systemctl $3 $2
			if [[ $(is_service_running ${nip} ${2}) -gt "1" ]]; then
				echo -e "${idsCL[Green]}OK${idsCL[Default]}"
				elif [ "$3" = "Stop" ]; then echo -e "${idsCL[Red]}STOPPED${idsCL[Default]}"
				else echo -e "${idsCL[Red]}ERROR${idsCL[Default]}"
			fi
			nid=`expr $nid + 1`
		done
		
		echo ""
		echo -e "${idsCL[Green]}${SER} has been ${ADISP}ed${idsCL[Default]}"
		echo ""
		exit 0
	;;

	newcert)
		echo -e "${idsCL[LightGreen]}Requesting Certificate for '${idsCL[Yellow]}${2}${idsCL[LightGreen]}'...${idsCL[Default]}"
		do_with_root $CERT_DAEMON certonly --webroot -w /var/www/html -d $2
		do_with_root chown -R root:letsencrypt /etc/letsencrypt
		do_with_root chmod -R 6775 /etc/letsencrypt
		echo -e "${idsCL[LightGreen]}Waiting for Certificate Replication...${idsCL[Default]}"
		sleep 20
		"$0" service nginx reload
		exit 0
	;;

	certrenew)
		echo -e "${idsCL[LightGreen]}Renewing Certificates...${idsCL[Default]}"
		do_with_root $DAEMON renew --webroot -w /var/www/html
		do_with_root chown -R root:letsencrypt /etc/letsencrypt
		do_with_root chmod -R 6775 /etc/letsencrypt
		echo -e "${idsCL[LightGreen]}Waiting for Certificate Replication...${idsCL[Default]}"
		sleep 20
		"$0" service nginx reload
		exit 0
	;;

	nightlyrenew)
		rm -f /opt/idssys/nodemgmt/cert-renewal-run-$(hostname)
		do_with_root $DAEMON renew --webroot -w /var/www/html >> /opt/idssys/nodemgmt/cert-renewal-run-$(hostname)
		do_with_root chown -R root:letsencrypt /etc/letsencrypt >> /opt/idssys/nodemgmt/cert-renewal-run-$(hostname)
		do_with_root chmod -R 6775 /etc/letsencrypt >> /opt/idssys/nodemgmt/cert-renewal-run-$(hostname)
		sleep 20
		"$0" service nginx reload >> /opt/idssys/nodemgmt/cert-renewal-run-$(hostname)
		exit 0
	;;
	
	update)
		exit 0
	;;
		
	set-permissions)
		nid=1
		for nip in "${NODE_HOSTS[@]}"
		do
			echo -e "${idsCL[Yellow]}Setting folder permissions for Node ${nid} ($nip)${idsCL[Default]}"
			echo -en "${idsCL[Cyan]}LetsEncrypt Certs    ${idsCL[Default]}"
			ssh root@${nip} chown -R root:letsencrypt /etc/letsencrypt
			ssh root@${nip} chmod -R 6775 /etc/letsencrypt
			echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
			echo -en "${idsCL[Cyan]}Webserver folders    ${idsCL[Default]}"
			ssh root@${nip} chown -R www-data:www-data /var/www
			ssh root@${nip} chmod -R 7775 /var/www
			echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
			echo -en "${idsCL[Cyan]}Gogs Folder          ${idsCL[Default]}"
			ssh root@${nip} chown -R gogs:gogs /var/www/gogs
			ssh root@${nip} chmod -R 7775 /var/www/gogs
			echo -e "${idsCL[Green]}Complete${idsCL[Default]}"
			echo ""
			nid=`expr $nid + 1`
		done
	;;

	*)
		echo ""
		echo -e "Usage: ${idsCL[Yellow]}nodemgmt${idsCL[Default]} { ${idsCL[Yellow]}service${idsCL[Default]} [service] [action] | ${idsCL[Yellow]}newcert${idsCL[Default]} [domain(,s)] | ${idsCL[Yellow]}certrenew${idsCL[Default]} }"
		echo ""
		exit 1
	;;

esac

exit 0