#!/bin/sh
# Installs Kolo on this server: Docker if missing, /opt/kolo with the compose file, Caddy config, the kolo
# command and a .env of fresh secrets; then the first update and the first brand with its owner.
#   curl -fsSL https://get.trykolo.com | sudo sh
# Answers can be given in the environment instead of at the prompts: KOLO_BRAND_NAME, KOLO_STAFF_HOST,
# KOLO_PORTAL_HOST, KOLO_OWNER_NAME, KOLO_OWNER_EMAIL, KOLO_LICENCE, CADDY_EMAIL, KOLO_VERSION.
# Without a licence key the install runs a 14-day trial; the key can be added later in the staff area.
set -eu
IMAGE="ghcr.io/dussto/kolo"
DIR=/opt/kolo

[ "$(id -u)" = 0 ] || { echo "run as root: curl -fsSL https://get.trykolo.com | sudo sh"; exit 1; }
[ "$(uname -s)" = Linux ] || { echo "Kolo installs on a Linux server"; exit 1; }
command -v apt-get >/dev/null || echo "note: tested on Ubuntu 22.04/24.04 and Debian 12"
[ -f "$DIR/.env" ] && { echo "Kolo is already installed in $DIR; run: kolo update"; exit 0; }

ask() { # ask VAR "prompt" [default]
  eval "v=\${$1:-}"
  if [ -z "$v" ]; then
    if [ -t 0 ]; then printf '%s%s: ' "$2" "${3:+ [$3]}"; read -r v </dev/tty; fi
    v="${v:-${3:-}}"
    [ -n "$v" ] || { echo "$1 is required"; exit 1; }
    eval "$1=\"\$v\""
  fi
}
ask_opt() { eval "v=\${$1:-}"; if [ -z "$v" ] && [ -t 0 ]; then printf '%s: ' "$2"; read -r v </dev/tty; fi; eval "$1=\"\$v\""; }
secret() { if command -v openssl >/dev/null; then openssl rand -base64 32; else head -c 32 /dev/urandom | base64; fi; }
# The hub fills its own address in when it serves this script; a copy from the repository talks to production.
HUB_URL="https://account-stg.trykolo.app"; case "$HUB_URL" in __*) HUB_URL="https://account.trykolo.com" ;; esac

echo "Kolo installer"
ask KOLO_BRAND_NAME  "Your hosting brand's name"
ask KOLO_STAFF_HOST  "Staff address (a domain pointed at this server)"
ask KOLO_PORTAL_HOST "Customer portal address (a domain pointed at this server)"
ask KOLO_OWNER_NAME  "Your name"
ask KOLO_OWNER_EMAIL "Your email, for the first sign-in"
ask_opt KOLO_LICENCE "Licence key from your Kolo dashboard (leave empty for a 14-day trial)"
CADDY_EMAIL="${CADDY_EMAIL:-$KOLO_OWNER_EMAIL}"
KOLO_VERSION="${KOLO_VERSION:-latest}"

if ! command -v docker >/dev/null; then
  echo "installing Docker"
  command -v curl >/dev/null || { apt-get update -qq && apt-get install -y -qq curl ca-certificates >/dev/null; }
  curl -fsSL https://get.docker.com | sh >/dev/null
fi
docker compose version >/dev/null 2>&1 || { echo "Docker is installed but the compose plugin is missing"; exit 1; }

mkdir -p "$DIR" && cd "$DIR" && chmod 700 "$DIR"
echo "pulling $IMAGE:$KOLO_VERSION"
docker pull -q "$IMAGE:$KOLO_VERSION" >/dev/null
for f in compose.yml Caddyfile kolo; do docker run --rm "$IMAGE:$KOLO_VERSION" cat "install/$f" > "$f"; done
chmod +x kolo && ln -sf "$DIR/kolo" /usr/local/bin/kolo

umask 077
cat > .env <<EOF
# Kolo install settings. Keep a copy off this server: the master key encrypts secrets in the database.
KOLO_ROLE=install
KOLO_ENV=production
KOLO_REGION=us
KOLO_VERSION=$KOLO_VERSION
KOLO_STAFF_HOST=$KOLO_STAFF_HOST
KOLO_PORTAL_HOST=$KOLO_PORTAL_HOST
CADDY_EMAIL=$CADDY_EMAIL
POSTGRES_PASSWORD=$(secret | tr -d '/+=' )
POSTGRES_APP_PASSWORD=$(secret | tr -d '/+=' )
KOLO_MASTER_KEYS=install1:$(secret)
KOLO_REGION_SECRET=$(secret)
KOLO_HUB_URL=$HUB_URL
KOLO_LICENCE_KEY=$KOLO_LICENCE
EOF
umask 022

kolo update
KOLO_INIT_BRAND="$KOLO_BRAND_NAME" KOLO_INIT_STAFF_HOST="$KOLO_STAFF_HOST" KOLO_INIT_PORTAL_HOST="$KOLO_PORTAL_HOST" \
KOLO_INIT_OWNER_NAME="$KOLO_OWNER_NAME" KOLO_INIT_OWNER_EMAIL="$KOLO_OWNER_EMAIL" kolo init

cat <<EOF

Kolo is installed in $DIR.
  Point $KOLO_STAFF_HOST and $KOLO_PORTAL_HOST at this server if you haven't; certificates are issued on first visit.
  Open the sign-in link printed above to set your password. Then, in the staff area, connect your Enhance panel
  and your email server, and add products. Without a licence key this is a 14-day trial: get a key at
  $HUB_URL under Installs and paste it in Settings > Licence.
  Later: kolo update, kolo backup, kolo doctor, kolo logs.
EOF