#!/bin/bash

###############################################################################
# Layer 1B: Nodito (Proxmox) Setup
# 
# This script configures the Nodito Proxmox server.
# Runs independently - can be executed without VPS setup.
###############################################################################

set -e  # Exit on error

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

# Project root directory
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
ANSIBLE_DIR="$PROJECT_ROOT/ansible"

###############################################################################
# Helper Functions
###############################################################################

print_header() {
    echo -e "\n${BLUE}========================================${NC}"
    echo -e "${BLUE}$1${NC}"
    echo -e "${BLUE}========================================${NC}\n"
}

print_success() {
    echo -e "${GREEN}✓${NC} $1"
}

print_error() {
    echo -e "${RED}✗${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}⚠${NC} $1"
}

print_info() {
    echo -e "${BLUE}ℹ${NC} $1"
}

confirm_action() {
    local prompt="$1"
    local response
    
    read -p "$(echo -e ${YELLOW}${prompt}${NC} [y/N]: )" response
    [[ "$response" =~ ^[Yy]$ ]]
}

###############################################################################
# Verification Functions
###############################################################################

check_layer_0_complete() {
    print_header "Verifying Layer 0 Prerequisites"
    
    local errors=0
    
    # Check if venv exists
    if [ ! -d "$PROJECT_ROOT/venv" ]; then
        print_error "Python venv not found. Run Layer 0 first."
        ((errors++))
    else
        print_success "Python venv exists"
    fi
    
    # Check if we're in a venv
    if [ -z "$VIRTUAL_ENV" ]; then
        print_error "Virtual environment not activated"
        echo "Run: source venv/bin/activate"
        ((errors++))
    else
        print_success "Virtual environment activated"
    fi
    
    # Check if Ansible is installed
    if ! command -v ansible &> /dev/null; then
        print_error "Ansible not found"
        ((errors++))
    else
        print_success "Ansible found: $(ansible --version | head -n1)"
    fi
    
    # Check if inventory.ini exists
    if [ ! -f "$ANSIBLE_DIR/inventory.ini" ]; then
        print_error "inventory.ini not found"
        ((errors++))
    else
        print_success "inventory.ini exists"
    fi
    
    if [ $errors -gt 0 ]; then
        print_error "Layer 0 is not complete. Please run ./scripts/setup_layer_0.sh first"
        exit 1
    fi
    
    print_success "Layer 0 prerequisites verified"
}

get_hosts_from_inventory() {
    local group="$1"
    cd "$ANSIBLE_DIR"
    ansible-inventory -i inventory.ini --list | \
        python3 -c "import sys, json; data=json.load(sys.stdin); print(' '.join(data.get('$group', {}).get('hosts', [])))" 2>/dev/null || echo ""
}

check_nodito_configured() {
    print_header "Checking Nodito Configuration"
    
    local nodito_hosts=$(get_hosts_from_inventory "nodito")
    
    if [ -z "$nodito_hosts" ]; then
        print_error "No nodito host configured in inventory.ini"
        print_info "Add nodito to [nodito] group in inventory.ini to proceed"
        exit 1
    fi
    
    print_success "Nodito configured: $nodito_hosts"
    echo ""
}

###############################################################################
# Nodito Setup Functions
###############################################################################

setup_nodito_bootstrap() {
    print_header "Bootstrapping Nodito (Proxmox Server)"
    
    cd "$ANSIBLE_DIR"
    
    print_info "This will:"
    echo "  • Set up SSH key access for root"
    echo "  • Create the counterweight user with SSH keys"
    echo "  • Update and secure the system"
    echo "  • Disable root login and password authentication"
    echo ""
    print_info "Running: ansible-playbook -i inventory.ini infra/nodito/30_proxmox_bootstrap_playbook.yml"
    print_warning "You will be prompted for the root password"
    echo ""
    
    if ! confirm_action "Proceed with nodito bootstrap?"; then
        print_warning "Skipped nodito bootstrap"
        return 1
    fi
    
    # Run with root user and ask for password
    if ansible-playbook -i inventory.ini infra/nodito/30_proxmox_bootstrap_playbook.yml -e 'ansible_user=root' --ask-pass; then
        print_success "Nodito bootstrap complete"
        return 0
    else
        print_error "Nodito bootstrap failed"
        return 1
    fi
}

setup_nodito_community_repos() {
    print_header "Switching Nodito to Community Repositories"
    
    cd "$ANSIBLE_DIR"
    
    print_info "This will:"
    echo "  • Remove enterprise repository files"
    echo "  • Add community repository files"
    echo "  • Disable subscription nag messages"
    echo "  • Update Proxmox packages"
    echo ""
    print_info "Running: ansible-playbook -i inventory.ini infra/nodito/31_proxmox_community_repos_playbook.yml"
    echo ""
    
    if ! confirm_action "Proceed with community repos setup?"; then
        print_warning "Skipped community repos setup"
        return 1
    fi
    
    if ansible-playbook -i inventory.ini infra/nodito/31_proxmox_community_repos_playbook.yml; then
        print_success "Community repositories configured"
        print_warning "Clear browser cache before using Proxmox web UI (Ctrl+Shift+R)"
        return 0
    else
        print_error "Community repos setup failed"
        return 1
    fi
}

setup_nodito_zfs() {
    print_header "Setting Up ZFS Storage Pool on Nodito (Optional)"
    
    cd "$ANSIBLE_DIR"
    
    print_warning "⚠️  ZFS setup will DESTROY ALL DATA on the specified disks!"
    echo ""
    print_info "Before proceeding, you must:"
    echo "  1. SSH into nodito: ssh root@<nodito-ip>"
    echo "  2. List disks: ls -la /dev/disk/by-id/ | grep -E '(ata-|scsi-|nvme-)'"
    echo "  3. Identify the two disk IDs you want to use for RAID 1"
    echo "  4. Edit ansible/infra/nodito/nodito_vars.yml"
    echo "  5. Set zfs_disk_1 and zfs_disk_2 to your disk IDs"
    echo ""
    print_info "Example nodito_vars.yml content:"
    echo '  zfs_disk_1: "/dev/disk/by-id/ata-WDC_WD40EFRX-68N32N0_WD-WCC7K1234567"'
    echo '  zfs_disk_2: "/dev/disk/by-id/ata-WDC_WD40EFRX-68N32N0_WD-WCC7K7654321"'
    echo ""
    
    if [ ! -f "$ANSIBLE_DIR/infra/nodito/nodito_vars.yml" ]; then
        print_warning "nodito_vars.yml not found"
        if confirm_action "Create nodito_vars.yml template?"; then
            cat > "$ANSIBLE_DIR/infra/nodito/nodito_vars.yml" << 'EOF'
# Nodito Variables
# Configure these before running ZFS setup

# ZFS Storage Pool Configuration
# Uncomment and configure these lines after identifying your disk IDs:
# zfs_disk_1: "/dev/disk/by-id/ata-YOUR-DISK-1-ID-HERE"
# zfs_disk_2: "/dev/disk/by-id/ata-YOUR-DISK-2-ID-HERE"
# zfs_pool_name: "proxmox-storage"

# CPU Temperature Monitoring
monitoring_script_dir: /opt/cpu-temp-monitor
monitoring_script_path: "{{ monitoring_script_dir }}/cpu_temp_monitor.sh"
log_file: "{{ monitoring_script_dir }}/cpu_temp_monitor.log"
temp_threshold_celsius: 80
EOF
            print_success "Created nodito_vars.yml template"
            print_info "Edit this file and configure ZFS disks, then re-run this script"
        fi
        return 1
    fi
    
    # Check if ZFS disks are configured
    if ! grep -q "^zfs_disk_1:" "$ANSIBLE_DIR/infra/nodito/nodito_vars.yml" 2>/dev/null; then
        print_info "ZFS disks not configured in nodito_vars.yml"
        print_info "Edit ansible/infra/nodito/nodito_vars.yml to configure disk IDs"
        if ! confirm_action "Skip ZFS setup for now?"; then
            print_info "Please configure ZFS disks first"
            return 1
        fi
        print_warning "Skipped ZFS setup"
        return 1
    fi
    
    print_info "Running: ansible-playbook -i inventory.ini infra/nodito/32_zfs_pool_setup_playbook.yml"
    echo ""
    
    if ! confirm_action "⚠️  Proceed with ZFS setup? (THIS WILL DESTROY DATA ON CONFIGURED DISKS)"; then
        print_warning "Skipped ZFS setup"
        return 1
    fi
    
    if ansible-playbook -i inventory.ini infra/nodito/32_zfs_pool_setup_playbook.yml; then
        print_success "ZFS storage pool configured"
        return 0
    else
        print_error "ZFS setup failed"
        return 1
    fi
}

setup_nodito_cloud_template() {
    print_header "Creating Debian Cloud Template on Nodito (Optional)"
    
    cd "$ANSIBLE_DIR"
    
    print_info "This will:"
    echo "  • Download Debian cloud image"
    echo "  • Create a VM template (ID 9000)"
    echo "  • Configure cloud-init for easy VM creation"
    echo ""
    print_info "Running: ansible-playbook -i inventory.ini infra/nodito/33_proxmox_debian_cloud_template.yml"
    echo ""
    
    if ! confirm_action "Proceed with cloud template creation?"; then
        print_warning "Skipped cloud template creation"
        return 1
    fi
    
    if ansible-playbook -i inventory.ini infra/nodito/33_proxmox_debian_cloud_template.yml; then
        print_success "Debian cloud template created (VM ID 9000)"
        return 0
    else
        print_error "Cloud template creation failed"
        return 1
    fi
}

###############################################################################
# Verification Functions
###############################################################################

verify_layer_1b() {
    print_header "Verifying Layer 1B Completion"
    
    cd "$ANSIBLE_DIR"
    
    local ssh_key=$(grep "ansible_ssh_private_key_file" "$ANSIBLE_DIR/inventory.ini" | head -n1 | sed 's/.*ansible_ssh_private_key_file=\([^ ]*\).*/\1/')
    ssh_key="${ssh_key/#\~/$HOME}"
    
    local nodito_hosts=$(get_hosts_from_inventory "nodito")
    
    print_info "Testing SSH as counterweight user..."
    echo ""
    
    for host in $nodito_hosts; do
        if timeout 10 ssh -i "$ssh_key" -o StrictHostKeyChecking=no -o BatchMode=yes counterweight@$host "echo 'SSH OK'" &>/dev/null; then
            print_success "SSH to $host as counterweight: OK"
        else
            print_error "Cannot SSH to $host as counterweight"
            print_info "Test manually: ssh -i $ssh_key counterweight@$host"
        fi
    done
    
    echo ""
}

###############################################################################
# Summary Functions
###############################################################################

print_summary() {
    print_header "Layer 1B: Nodito Setup Complete! 🎉"
    
    echo "Summary of what was configured:"
    echo ""
    print_success "Nodito bootstrapped with SSH keys"
    print_success "counterweight user created"
    print_success "Community repositories configured"
    print_success "Root login and password auth disabled"
    
    if grep -q "^zfs_disk_1:" "$ANSIBLE_DIR/infra/nodito/nodito_vars.yml" 2>/dev/null; then
        print_success "ZFS storage pool configured (if you ran it)"
    fi
    echo ""
    
    print_warning "Important Security Changes:"
    echo "  • Root SSH login is now disabled"
    echo "  • Always use 'counterweight' user for SSH access"
    echo "  • Password authentication is disabled"
    echo ""
    
    print_info "Proxmox Web UI:"
    local nodito_hosts=$(get_hosts_from_inventory "nodito")
    echo "  • Access at: https://$nodito_hosts:8006"
    echo "  • Clear browser cache (Ctrl+Shift+R) to avoid UI issues"
    echo ""
    
    print_info "Next steps:"
    echo "  1. Test SSH: ssh -i ~/.ssh/counterganzua counterweight@<nodito-ip>"
    echo "  2. Access Proxmox web UI and verify community repos"
    echo "  3. Create VMs on Proxmox (if needed)"
    echo "  4. Proceed to Layer 2: ./scripts/setup_layer_2.sh"
    echo ""
}

###############################################################################
# Main Execution
###############################################################################

main() {
    clear
    
    print_header "🖥️  Layer 1B: Nodito (Proxmox) Setup"
    
    echo "This script will configure your Nodito Proxmox server."
    echo ""
    print_info "Target: nodito (Proxmox server)"
    echo ""
    
    if ! confirm_action "Continue with Layer 1B setup?"; then
        echo "Setup cancelled."
        exit 0
    fi
    
    check_layer_0_complete
    check_nodito_configured
    
    # Nodito Setup
    local setup_failed=false
    setup_nodito_bootstrap || setup_failed=true
    setup_nodito_community_repos || setup_failed=true
    setup_nodito_zfs || setup_failed=true
    setup_nodito_cloud_template || setup_failed=true
    
    verify_layer_1b
    
    if [ "$setup_failed" = true ]; then
        print_warning "Some optional steps were skipped - this is normal"
    fi
    
    print_summary
}

# Run main function
main "$@"