# Copyright (c) 2021-2025 tteck
# Author: tteck (tteckster)
# Co-Author: MickLesk
# Co-Author: michelroegl-brunner
# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE

if ! command -v curl >/dev/null 2>&1; then
    printf "\r\e[2K%b" '\033[93m Setup Source \033[m' >&2
    apt-get update >/dev/null 2>&1
    apt-get install -y curl >/dev/null 2>&1
fi
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/core.func)
source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/error_handler.func)
load_functions
catch_errors

# This function enables IPv6 if it's not disabled and sets verbose mode
verb_ip6() {
    set_std_mode # Set STD mode based on VERBOSE

    if [ "$DISABLEIPV6" == "yes" ]; then
        echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
        $STD sysctl -p
    fi
}

# # This function sets error handling options and defines the error_handler function to handle errors
# catch_errors() {
#   set -Eeuo pipefail
#   trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
# }

# # This function handles errors
# error_handler() {
#   source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/api.func)
#   local exit_code="$1"
#   local line_number="$2"
#   local command="${3:-}"

#   if [[ "$exit_code" -eq 0 ]]; then
#     return 0
#   fi

#   printf "\e[?25h"
#   echo -e "\n${RD}[ERROR]${CL} in line ${RD}${line_number}${CL}: exit code ${RD}${exit_code}${CL}: while executing command ${YW}${command}${CL}\n"
#   exit "$exit_code"
#}

# This function sets up the Container OS by generating the locale, setting the timezone, and checking the network connection
setting_up_container() {
    msg_info "Setting up Container OS"
    for ((i = RETRY_NUM; i > 0; i--)); do
        if [ "$(hostname -I)" != "" ]; then
            break
        fi
        echo 1>&2 -en "${CROSS}${RD} No Network! "
        sleep $RETRY_EVERY
    done
    if [ "$(hostname -I)" = "" ]; then
        echo 1>&2 -e "\n${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
        echo -e "${NETWORK}Check Network Settings"
        exit 1
    fi
    rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
    systemctl disable -q --now systemd-networkd-wait-online.service
    msg_ok "Set up Container OS"
    #msg_custom "${CM}" "${GN}" "Network Connected: ${BL}$(hostname -I)"
    msg_ok "Network Connected: ${BL}$(hostname -I)"
}

# This function checks the network connection by pinging a known IP address and prompts the user to continue if the internet is not connected
network_check() {
    set +e
    trap - ERR
    ipv4_connected=false
    ipv6_connected=false
    sleep 1

    # Check IPv4 connectivity to Google, Cloudflare & Quad9 DNS servers.
    if ping -c 1 -W 1 1.1.1.1 &>/dev/null || ping -c 1 -W 1 8.8.8.8 &>/dev/null || ping -c 1 -W 1 9.9.9.9 &>/dev/null; then
        msg_ok "IPv4 Internet Connected"
        ipv4_connected=true
    else
        msg_error "IPv4 Internet Not Connected"
    fi

    # Check IPv6 connectivity to Google, Cloudflare & Quad9 DNS servers.
    if ping6 -c 1 -W 1 2606:4700:4700::1111 &>/dev/null || ping6 -c 1 -W 1 2001:4860:4860::8888 &>/dev/null || ping6 -c 1 -W 1 2620:fe::fe &>/dev/null; then
        msg_ok "IPv6 Internet Connected"
        ipv6_connected=true
    else
        msg_error "IPv6 Internet Not Connected"
    fi

    # If both IPv4 and IPv6 checks fail, prompt the user
    if [[ $ipv4_connected == false && $ipv6_connected == false ]]; then
        read -r -p "No Internet detected, would you like to continue anyway? <y/N> " prompt
        if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
            echo -e "${INFO}${RD}Expect Issues Without Internet${CL}"
        else
            echo -e "${NETWORK}Check Network Settings"
            exit 1
        fi
    fi

    # DNS resolution checks for GitHub-related domains (IPv4 and/or IPv6)
    GIT_HOSTS=("github.com" "raw.githubusercontent.com" "api.github.com" "git.community-scripts.org")
    GIT_STATUS="Git DNS:"
    DNS_FAILED=false

    for HOST in "${GIT_HOSTS[@]}"; do
        RESOLVEDIP=$(getent hosts "$HOST" | awk '{ print $1 }' | grep -E '(^([0-9]{1,3}\.){3}[0-9]{1,3}$)|(^[a-fA-F0-9:]+$)' | head -n1)
        if [[ -z "$RESOLVEDIP" ]]; then
            GIT_STATUS+="$HOST:($DNSFAIL)"
            DNS_FAILED=true
        else
            GIT_STATUS+=" $HOST:($DNSOK)"
        fi
    done

    if [[ "$DNS_FAILED" == true ]]; then
        fatal "$GIT_STATUS"
    else
        msg_ok "$GIT_STATUS"
    fi

    set -e
    trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
}

# This function updates the Container OS by running apt-get update and upgrade
update_os() {
    msg_info "Updating Container OS"
    if [[ "$CACHER" == "yes" ]]; then
        echo "Acquire::http::Proxy-Auto-Detect \"/usr/local/bin/apt-proxy-detect.sh\";" >/etc/apt/apt.conf.d/00aptproxy
        cat <<'EOF' >/usr/local/bin/apt-proxy-detect.sh
#!/bin/bash
if nc -w1 -z "${CACHER_IP}" 3142; then
  echo -n "http://${CACHER_IP}:3142"
else
  echo -n "DIRECT"
fi
EOF
        chmod +x /usr/local/bin/apt-proxy-detect.sh
    fi
    $STD apt-get update
    $STD apt-get -o Dpkg::Options::="--force-confold" -y dist-upgrade
    rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
    msg_ok "Updated Container OS"
    source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/misc/tools.func)
}

# This function modifies the message of the day (motd) and SSH settings
motd_ssh() {
    grep -qxF "export TERM='xterm-256color'" /root/.bashrc || echo "export TERM='xterm-256color'" >>/root/.bashrc

    if [ -f "/etc/os-release" ]; then
        OS_NAME=$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"')
        OS_VERSION=$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')
    elif [ -f "/etc/debian_version" ]; then
        OS_NAME="Debian"
        OS_VERSION=$(cat /etc/debian_version)
    fi

    PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"
    echo "echo -e \"\"" >"$PROFILE_FILE"
    echo -e "echo -e \"${BOLD}${YW}${APPLICATION} LXC Container - DEV Repository${CL}\"" >>"$PROFILE_FILE"
    echo -e "echo -e \"${RD}WARNING: This is a DEVELOPMENT version (ProxmoxVED). Do NOT use in production!${CL}\"" >>"$PROFILE_FILE"
    echo -e "echo -e \"${YW} OS: ${GN}${OS_NAME} - Version: ${OS_VERSION}${CL}\"" >>"$PROFILE_FILE"
    echo -e "echo -e \"${YW} Hostname: ${GN}\$(hostname)${CL}\"" >>"$PROFILE_FILE"
    echo -e "echo -e \"${YW} IP Address: ${GN}\$(hostname -I | awk '{print \$1}')${CL}\"" >>"$PROFILE_FILE"
    echo -e "echo -e \"${YW} Repository: ${GN}https://github.com/community-scripts/ProxmoxVED${CL}\"" >>"$PROFILE_FILE"
    echo "echo \"\"" >>"$PROFILE_FILE"

    chmod -x /etc/update-motd.d/*

    if [[ "${SSH_ROOT}" == "yes" ]]; then
        sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
        systemctl restart sshd
    fi
}

# This function customizes the container by modifying the getty service and enabling auto-login for the root user
customize() {
    if [[ "$PASSWORD" == "" ]]; then
        msg_info "Customizing Container"
        GETTY_OVERRIDE="/etc/systemd/system/container-getty@1.service.d/override.conf"
        mkdir -p $(dirname $GETTY_OVERRIDE)
        cat <<EOF >$GETTY_OVERRIDE
  [Service]
  ExecStart=
  ExecStart=-/sbin/agetty --autologin root --noclear --keep-baud tty%I 115200,38400,9600 \$TERM
EOF
        systemctl daemon-reload
        systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
        msg_ok "Customized Container"
    fi
    echo "bash -c \"\$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/${app}.sh)\"" >/usr/bin/update
    chmod +x /usr/bin/update
    if [[ -n "${SSH_AUTHORIZED_KEY}" ]]; then
        mkdir -p /root/.ssh
        echo "${SSH_AUTHORIZED_KEY}" >/root/.ssh/authorized_keys
        chmod 700 /root/.ssh
        chmod 600 /root/.ssh/authorized_keys
    fi
}
