#!/bin/bash -x
set -e

service iptables stop
chkconfig iptables off

yum install --assumeyes --tolerant https://download.postgresql.org/pub/repos/yum/9.5/redhat/rhel-6-x86_64/pgdg-redhat95-9.5-2.noarch.rpm
yum install --assumeyes postgresql95-server postgresql95-contrib

service postgresql-9.5 initdb
chkconfig postgresql-9.5 on
sed -i -e 's|host    all             all             127.0.0.1/32            ident|host    all             all             127.0.0.1/32            md5|' /var/lib/pgsql/9.5/data/pg_hba.conf
sed -i -e 's|host    all             all             ::1/128                 ident|host    all             all             ::1/128                 md5|' /var/lib/pgsql/9.5/data/pg_hba.conf
sed -i -e "s|#listen_addresses = 'localhost'|listen_addresses = '*'|" /var/lib/pgsql/9.5/data/postgresql.conf
echo "host    all             all             10.0.0.0/8                 md5" >> /var/lib/pgsql/9.5/data/pg_hba.conf

service postgresql-9.5 start

###
# Waarp installation
###

# FIXME: change by real repo

cat >/etc/yum.repos.d/Waarp.repo <<EOF
[waarp]
name=Waarp Repository
baseurl=http://dl.waarp.org/repos/rhel6
enabled=1
gpgcheck=0
EOF

yum install --assumeyes waarp-r66-server waarp-gateway-ftp waarp-manager

cat /dev/urandom | head -c64 > /etc/waarp/certs/restsigning.key
chown waarp:waarp /etc/waarp/certs/restsigning.key

###
# Partners creation
###

su waarp <<EOT

echo "initializing server1"
waarp-ctl create -t server --hostid server1    \
                 --port-r66        6666        \
                 --port-r66-ssl    6667        \
                 --port-monitoring 8066        \
                 --port-admin      8067        \
                 --port-rest       8088        \
                 --ip-rest         127.0.0.1   \
                 --autostart                   \
                 --initdb

echo "initializing server2"
waarp-ctl create -t server --hostid server2    \
                 --port-r66        6668        \
                 --port-r66-ssl    6669        \
                 --port-monitoring 8068        \
                 --port-admin      8069        \
                 --port-rest       8089        \
                 --ip-rest         127.0.0.2   \
                 --autostart                   \
                 --initdb

echo "initializing gwftp"
waarp-ctl create -t gwftp --hostid gwftp       \
                 --port-r66        6672        \
                 --port-r66-ssl    6673        \
                 --port-monitoring 8072        \
                 --port-admin      8073        \
                 --port-rest       8091        \
                 --ip-rest         127.0.0.4   \
                 --port-ftp        6621        \
                 --port-ftp-monitoring 8074    \
                 --port-ftp-admin 8075         \
                 --autostart                   \
                 --initdb

echo "initializing wm-client"
waarp-ctl create -t client --hostid wm-client
sed  -i -e 's|<dbserver>.*</dbserver>|<dbserver>jdbc:h2:/var/lib/waarp/server1/db/waarp;MODE=ORACLE;AUTO_SERVER=TRUE</dbserver>|' \
     /etc/waarp/conf.d/wm-client/client.xml

echo "initializing fw-client"
waarp-ctl create -t client --hostid fw-client
sed  -i -e 's|<dbserver>.*</dbserver>|<dbserver>jdbc:h2:/var/lib/waarp/server1/db/waarp;MODE=ORACLE;AUTO_SERVER=TRUE</dbserver>|' \
     /etc/waarp/conf.d/fw-client/client.xml

# Filewatcher configuration

head -n -1 /etc/waarp/conf.d/fw-client/client.xml>/tmp/client.xml
mv /tmp/client.xml /etc/waarp/conf.d/fw-client/client.xml
mkdir -p /var/lib/waarp/fw-client/spool/
cat <<EOXML >>/etc/waarp/conf.d/fw-client/client.xml
    <spooleddaemon>
        <stopfile>/var/lib/waarp/fw-client/spool/stop</stopfile>
        <logWarn>False</logWarn>
        <spooled>
            <info></info>
            <name>fw-client</name>
            <to>server1</to>
            <rule>fileWatcher</rule>
            <statusfile>/var/lib/waarp/fw-client/status.json</statusfile>
            <directory>/var/lib/waarp/fw-client/spool/</directory>
            <regex>.*</regex>
            <recursive>True</recursive>
            <elapse>5000</elapse>
            <submit>False</submit>
            <parallel>True</parallel>
            <limitParallel>1</limitParallel>
            <waarp>server1</waarp>
            <elapseWaarp>5000</elapseWaarp>
        </spooled>
    </spooleddaemon>
</config>
EOXML
head -n -1 /etc/waarp/conf.d/server1/server.xml>/tmp/server.xml
mv /tmp/server.xml /etc/waarp/conf.d/server1/server.xml
cat <<EOXML >>/etc/waarp/conf.d/server1/server.xml
    <business>
        <businessid>fw-client</businessid>
    </business>
</config>
EOXML

EOT

###
# Transfert files
###

#FIXME: pourquoi ftp/sftp ?
su waarp <<EOT
ssh-keygen -f ~/.ssh/id_rsa -N '' -t rsa -b 2048
cp ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys

mkdir -p /var/lib/waarp/ftp/sftp/{in/,out/}

mkdir /var/lib/waarp/files/
dd if=/dev/zero of=/var/lib/waarp/files/test1.file bs=1M count=1
dd if=/dev/zero of=/var/lib/waarp/files/test10.file bs=1M count=10
EOT

###
# WaarpManager initialisation
###

cp -f /vagrant/demo/wm/install-conf.sh /usr/share/waarp-manager/install-conf.sh
chown -R waarp:waarp /etc/waarp-manager /usr/share/waarp-manager
chmod +x /usr/share/waarp-manager/*.sh
chkconfig  --add waarp-manager

sed -i -e "s|^;\? \?Address =.*\$|Address = 0.0.0.0|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?User =.*\$|User = waarp|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?Password =.*\$|Password = waarp|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?Name =.*\$|Name = waarp-manager|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?DesKey =.*\$|DesKey = /etc/waarp/certs/cryptokey.des|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?OutDir =.*\$|OutDir = /var/lib/waarp/wm-client/out|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?InstallCmd =.*\$|InstallCmd = /usr/share/waarp-manager/install-conf.sh|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?ClientName =.*\$|ClientName = wm-client|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?RestSigningKey =.*\$|RestSigningKey = /etc/waarp/certs/restsigning.key|" /etc/waarp-manager/waarp-manager.ini
sed -i -e "s|^;\? \?HistoryRefresh =.*\$|HistoryRefresh = 2m|" /etc/waarp-manager/waarp-manager.ini


su postgres <<EOT

psql <<EOSQL
CREATE USER waarp;
ALTER USER waarp WITH ENCRYPTED PASSWORD 'waarp';
CREATE DATABASE "waarp-manager";
ALTER DATABASE "waarp-manager" OWNER TO waarp;
EOSQL

EOT


su waarp <<EOT
waarp-manager db dump | psql postgresql://waarp:waarp@localhost/waarp-manager
# Add custom templates to db
waarp-manager backup import -c /etc/waarp-manager/waarp-manager.ini -t template -i /vagrant/demo/wm/templates/toSFTP.yml
# Add custom data to db
cat /vagrant/demo/wm/wm-data.sql | psql postgresql://waarp:waarp@localhost/waarp-manager
EOT

service waarp-manager start

sleep 5

# Compute rules
curl --data "login=admin&password=admin" -c cookie.file -X POST http://localhost:8080/api/authenticate
for i in 1 2 3
do
    curl --cookie cookie.file -X PUT http://localhost:8080/api/templates/${i}/regenFlows
done
curl -b cookie.file -X POST http://localhost:8080/api/logout
rm -f cookie.file

su waarp <<'EOF'
waarp-manager push -c /etc/waarp-manager/waarp-manager.ini || true
EOF

###
#Configuration deployment
###

# cp /vagrant/demo/updateconf.sh /usr/share/waarp/
cp /vagrant/demo/sftp-r66.sh /usr/share/waarp/
cp /vagrant/demo/r66-sftp.sh /usr/share/waarp/

chmod +x /usr/share/waarp/*.sh

su waarp <<'EOT'
for server in server1 server2 gwftp; do
    cd /var/lib/waarp/$server/arch
    unzip /var/lib/waarp/wm-client/out/$server*.zip
    /usr/share/waarp/updateconf.sh /var/lib/waarp/$server/arch
done
EOT

for server in server1 server2 gwftp; do
    service waarp-r66server start $server
    if [[ $server == "gwftp" ]]; then
        service waarp-gwftp start $server
    fi
done