#!/bin/bash
source ~/.bashrc
# Complete All Remaining Tasks Automatically
# Uses successful methods from previous deployments

set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"

# Load environment variables
if [ -f "$PROJECT_ROOT/.env" ]; then
    set -a
    source <(grep -v '^#' "$PROJECT_ROOT/.env" | grep -v '^$' | sed 's/#.*$//' | grep '=')
    set +a
fi

# Colors
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m'

log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
log_step() { echo -e "\n${BLUE}=== $1 ===${NC}"; }

SSH_KEY="${SSH_KEY:-$HOME/.ssh/id_ed25519_proxmox}"
SSH_OPTS="-i $SSH_KEY -o StrictHostKeyChecking=no"
VM_USER="${VM_USER:-ubuntu}"

# VM IPs (discovered earlier)
VM_100_IP="192.168.1.57"  # cloudflare-tunnel
VM_101_IP="192.168.1.188" # k3s-master
VM_102_IP="192.168.1.121" # git-server
VM_103_IP="192.168.1.82"  # observability

PROXMOX_HOST="${PROXMOX_ML110_IP:-192.168.1.206}"

# Step 1: Install K3s on VM 101
install_k3s() {
    log_step "Step 1: Installing K3s on VM 101 (k3s-master)"
    
    log_info "Installing K3s on $VM_101_IP..."
    ssh $SSH_OPTS "${VM_USER}@${VM_101_IP}" <<'K3S_EOF'
set -e
echo "=== Installing K3s ==="

# Check if already installed
if command -v k3s &>/dev/null; then
    echo "K3s already installed"
    k3s --version
    sudo systemctl is-active k3s && echo "K3s is running" || echo "K3s is not running"
    exit 0
fi

# Install K3s
echo "Downloading and installing K3s..."
curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=latest sh -

# Verify installation
if command -v k3s &>/dev/null; then
    echo "K3s installed successfully"
    k3s --version
    
    # Start and enable service
    sudo systemctl enable k3s
    sudo systemctl start k3s
    
    # Wait for service to be ready
    echo "Waiting for K3s to start..."
    sleep 15
    
    # Verify service status
    if sudo systemctl is-active --quiet k3s; then
        echo "✓ K3s service is running"
        sudo k3s kubectl get nodes
        sudo k3s kubectl get pods --all-namespaces
    else
        echo "✗ K3s service failed to start"
        sudo systemctl status k3s --no-pager | head -20
        exit 1
    fi
else
    echo "✗ K3s installation failed"
    exit 1
fi
K3S_EOF
    
    if [ $? -eq 0 ]; then
        log_info "✓ K3s installed and running on VM 101"
    else
        log_error "K3s installation failed"
        return 1
    fi
}

# Step 2: Install and Configure Cloudflare Tunnel on VM 100
install_cloudflare_tunnel() {
    log_step "Step 2: Installing Cloudflare Tunnel on VM 100 (cloudflare-tunnel)"
    
    local tunnel_token="${CLOUDFLARE_TUNNEL_TOKEN:-}"
    if [ -z "$tunnel_token" ]; then
        log_warn "CLOUDFLARE_TUNNEL_TOKEN not set. Skipping Cloudflare Tunnel configuration."
        log_info "Installing cloudflared only..."
    fi
    
    log_info "Installing cloudflared on $VM_100_IP..."
    ssh $SSH_OPTS "${VM_USER}@${VM_100_IP}" <<CLOUDFLARE_EOF
set -e
echo "=== Installing Cloudflare Tunnel ==="

# Install cloudflared
if ! command -v cloudflared &>/dev/null; then
    echo "Downloading cloudflared..."
    curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -o /tmp/cloudflared
    sudo mv /tmp/cloudflared /usr/local/bin/cloudflared
    sudo chmod +x /usr/local/bin/cloudflared
    cloudflared --version
    echo "✓ cloudflared installed"
else
    echo "cloudflared already installed"
    cloudflared --version
fi

# Configure tunnel if token is provided
if [ -n "${tunnel_token}" ]; then
    echo "Configuring Cloudflare Tunnel..."
    sudo mkdir -p /etc/cloudflared
    
    # Create config file
    sudo tee /etc/cloudflared/config.yml > /dev/null <<CONFIG_EOF
tunnel: \$(cloudflared tunnel token ${tunnel_token} | grep -oP 'Tunnel ID: \K[^ ]+' || echo '')
credentials-file: /etc/cloudflared/credentials.json

ingress:
  - hostname: grafana.${CLOUDFLARE_DOMAIN:-d-bis.org}
    service: http://${VM_103_IP}:3000
  - hostname: prometheus.${CLOUDFLARE_DOMAIN:-d-bis.org}
    service: http://${VM_103_IP}:9090
  - hostname: git.${CLOUDFLARE_DOMAIN:-d-bis.org}
    service: http://${VM_102_IP}:3000
  - hostname: proxmox.${CLOUDFLARE_DOMAIN:-d-bis.org}
    service: https://${PROXMOX_HOST}:8006
  - service: http_status:404
CONFIG_EOF
    
    # Install as systemd service
    sudo cloudflared service install ${tunnel_token}
    
    # Start service
    sudo systemctl enable cloudflared
    sudo systemctl start cloudflared
    
    sleep 5
    if sudo systemctl is-active --quiet cloudflared; then
        echo "✓ Cloudflare Tunnel service is running"
        sudo systemctl status cloudflared --no-pager | head -10
    else
        echo "⚠ Cloudflare Tunnel service may need manual configuration"
        sudo systemctl status cloudflared --no-pager | head -10
    fi
else
    echo "⚠ Tunnel token not provided. Install manually with:"
    echo "  cloudflared tunnel login"
    echo "  cloudflared tunnel create <tunnel-name>"
    echo "  cloudflared tunnel route dns <tunnel-name> <hostname>"
fi
CLOUDFLARE_EOF
    
    if [ $? -eq 0 ]; then
        log_info "✓ Cloudflare Tunnel installed on VM 100"
    else
        log_warn "Cloudflare Tunnel installation had issues (may need manual config)"
    fi
}

# Step 3: Configure Gitea Initial Setup (via API)
configure_gitea() {
    log_step "Step 3: Configuring Gitea Initial Setup"
    
    log_info "Waiting for Gitea to be ready..."
    local max_attempts=30
    local attempt=0
    local gitea_ready=false
    
    while [ $attempt -lt $max_attempts ]; do
        if curl -s "http://${VM_102_IP}:3000" | grep -q "Gitea"; then
            gitea_ready=true
            break
        fi
        sleep 2
        attempt=$((attempt + 1))
    done
    
    if [ "$gitea_ready" = false ]; then
        log_warn "Gitea not ready after $max_attempts attempts"
        log_info "Gitea initial setup must be completed manually:"
        log_info "  1. Visit http://${VM_102_IP}:3000"
        log_info "  2. Complete the installation wizard"
        return 0
    fi
    
    log_info "Gitea is ready. Attempting automated setup..."
    
    # Try to configure via API (Gitea 1.19+ supports installation API)
    local response=$(curl -s -X POST "http://${VM_102_IP}:3000/api/v1/setup" \
        -H "Content-Type: application/json" \
        -d '{
            "db_type": "sqlite3",
            "db_host": "",
            "db_user": "",
            "db_passwd": "",
            "db_name": "gitea",
            "ssl_mode": "disable",
            "db_path": "data/gitea.db",
            "app_name": "Gitea",
            "repo_root_path": "/data/git/repositories",
            "lfs_root_path": "/data/git/lfs",
            "run_user": "git",
            "domain": "'${VM_102_IP}'",
            "ssh_port": 2222,
            "http_port": 3000,
            "app_url": "http://'${VM_102_IP}':3000/",
            "log_root_path": "/data/gitea/log",
            "smtp_host": "",
            "smtp_from": "",
            "smtp_user": "",
            "smtp_passwd": "",
            "admin_name": "admin",
            "admin_passwd": "admin123",
            "admin_confirm_passwd": "admin123",
            "admin_email": "admin@'${CLOUDFLARE_DOMAIN:-d-bis.org}'"
        }' 2>/dev/null || echo "")
    
    if echo "$response" | grep -q "success\|created"; then
        log_info "✓ Gitea configured successfully"
        log_info "  Admin user: admin"
        log_info "  Admin password: admin123 (change on first login!)"
    else
        log_warn "Automated Gitea setup may have failed"
        log_info "Complete setup manually at http://${VM_102_IP}:3000"
        log_info "Or check if setup was already completed"
    fi
}

# Step 4: Final Status and Summary
final_summary() {
    log_step "Final Summary"
    
    echo ""
    log_info "VM Status:"
    ssh $SSH_OPTS "root@$PROXMOX_HOST" "qm list | grep -E '(100|101|102|103)'"
    
    echo ""
    log_info "Service Status:"
    
    # Check K3s
    if ssh $SSH_OPTS "${VM_USER}@${VM_101_IP}" "sudo systemctl is-active k3s &>/dev/null && echo 'active' || echo 'inactive'" | grep -q "active"; then
        log_info "  ✓ K3s (VM 101): Running"
        ssh $SSH_OPTS "${VM_USER}@${VM_101_IP}" "sudo k3s kubectl get nodes 2>/dev/null | head -3" || true
    else
        log_warn "  ✗ K3s (VM 101): Not running"
    fi
    
    # Check Cloudflare Tunnel
    if ssh $SSH_OPTS "${VM_USER}@${VM_100_IP}" "sudo systemctl is-active cloudflared &>/dev/null && echo 'active' || echo 'inactive'" 2>/dev/null | grep -q "active"; then
        log_info "  ✓ Cloudflare Tunnel (VM 100): Running"
    else
        log_warn "  ⚠ Cloudflare Tunnel (VM 100): May need manual configuration"
    fi
    
    # Check Gitea
    if curl -s "http://${VM_102_IP}:3000" | grep -q "Gitea"; then
        log_info "  ✓ Gitea (VM 102): Running at http://${VM_102_IP}:3000"
    else
        log_warn "  ✗ Gitea (VM 102): Not accessible"
    fi
    
    # Check Observability
    if curl -s "http://${VM_103_IP}:9090/-/healthy" &>/dev/null; then
        log_info "  ✓ Prometheus (VM 103): Running at http://${VM_103_IP}:9090"
    else
        log_warn "  ✗ Prometheus (VM 103): Not accessible"
    fi
    
    if curl -s "http://${VM_103_IP}:3000/api/health" &>/dev/null; then
        log_info "  ✓ Grafana (VM 103): Running at http://${VM_103_IP}:3000"
    else
        log_warn "  ✗ Grafana (VM 103): Not accessible"
    fi
    
    echo ""
    log_info "Service URLs:"
    log_info "  K3s Dashboard: Use 'kubectl' commands on VM 101"
    log_info "  Gitea:         http://${VM_102_IP}:3000"
    log_info "  Prometheus:    http://${VM_103_IP}:9090"
    log_info "  Grafana:       http://${VM_103_IP}:3000 (admin/admin)"
    
    echo ""
    log_warn "Tasks Requiring Manual Steps or External Dependencies:"
    log_info "  1. Join R630 to cluster: SSH to R630 (192.168.1.49) not accessible"
    log_info "  2. Configure NFS storage: NFS server (10.10.10.1) not reachable"
    log_info "  3. Configure VLAN bridges on R630: Requires SSH to R630"
    log_info "  4. Complete Gitea setup: May need manual web UI access if API setup failed"
    
    echo ""
    log_info "✓ All automated tasks completed!"
}

main() {
    log_step "Completing All Remaining Tasks"
    
    install_k3s
    install_cloudflare_tunnel
    configure_gitea
    final_summary
}

main "$@"