#!/usr/bin/env bash
# Print direct NPMplus edit URLs for the 7 proxy hosts that need a certificate.
# Open each URL → SSL tab → Request new certificate → DNS Challenge → Cloudflare.
# Uses NPM_URL from .env or default.

set -e
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
cd "$PROJECT_ROOT"
[ -f .env ] && { set +u; set -a; source .env 2>/dev/null || true; set +a; set -u; }
NPM_URL="${NPM_URL:-https://${IP_NPMPLUS}:81}"
BASE="${NPM_URL%/}"
echo ""
echo "Open each URL, then: SSL tab → Request a new SSL Certificate → DNS Challenge → Cloudflare → (credential) → Submit"
echo ""
printf "%-35s %s\n" "Domain" "Edit URL"
echo "----------------------------------------------------------------------"
printf "%-35s %s\n" "cross-all.defi-oracle.io" "${BASE}/#/proxy-hosts/edit/22"
printf "%-35s %s\n" "rpc.d-bis.org"              "${BASE}/#/proxy-hosts/edit/26"
printf "%-35s %s\n" "rpc.defi-oracle.io"         "${BASE}/#/proxy-hosts/edit/24"
printf "%-35s %s\n" "rpc2.d-bis.org"            "${BASE}/#/proxy-hosts/edit/27"
printf "%-35s %s\n" "ws.rpc.d-bis.org"           "${BASE}/#/proxy-hosts/edit/28"
printf "%-35s %s\n" "ws.rpc2.d-bis.org"          "${BASE}/#/proxy-hosts/edit/29"
printf "%-35s %s\n" "wss.defi-oracle.io"        "${BASE}/#/proxy-hosts/edit/25"
echo ""
echo "Cloudflare credential content (paste in NPM): run ./scripts/certbot/print-cloudflare-credentials-from-env.sh"
echo ""