#!/bin/bash

##--------------------##
#   Legacy/Main Menu   #
##--------------------##
sed -i -e 's/magenta/blue/g' /etc/newt/palette

if [ "$1" != "-l" ]; then
  echo "Normal mode"
  PKGM="debconf-apt-progress -- apt"
  OUTPUT='/dev/null'
  IMODE=n
fi
if [ "$1" = "-l" ]; then
  echo "Legacy mode";
  PKGM="apt"
  OUTPUT='/dev/tty'
  IMODE=l
fi


##---------------##
#   Static-Vars   #
##---------------##

#Git-repo
repo=https://git.ictmaatwerk.com/bprieshof/UBU-Web-V2
branch=master
#Installer-config
phpver=7.4
sqlver=8.0
cockpit=1
PHPMyadmin=1
TestMode=0
#PackageManager-config
PKGA="add-apt-repository"
PKGI="${PKGM} install -y"
OUTPUT='/dev/null'
debconf-set-selections <<< 'libssl1.1:amd64 libraries/restart-without-asking boolean true'


##-------------##
#   Test-Vars   #
##-------------##

if [ $TestMode = 1 ]; then
domain=ict-dagbesteding.nl
email=b.prieshof@ictmaatwerk.com
password=MeiFerrieSekureTESTp@ssw0rd4213
hostname=vdh001.nxdi.nl
sslenable=0
domainwww=0
fi


##----------------##
#   Menu Entries   #
##----------------##

if [ $IMODE = n ]; then
#WebServers
webservers=("Nginx:" "Will install NGINX Webserver." ON)
webservers+=("Apache:" "Will install Apache Webserver." OFF)

##Nginx
#CMSList
NginxCMSL=("None:" "A plain webserver will be setup." OFF)
NginxCMSL+=("Wordpress:" "WordPress is a content management system based on PHP." OFF)
NginxCMSL+=("Nextcloud:" "Nextcloud is a suite of client-server software for creating and using file hosting services." OFF)
#Options
NginxOptions=("Option 1:" "Option 1 Desription" OFF)
NginxOptions+=("Option 2:" "Option 2 Desription" OFF)
NginxOptions+=("Option 3:" "Option 3 Desription" OFF)

##Apache
#CMSList
ApacheCMSL=("None:" "A plain webserver will be setup." OFF)
ApacheCMSL+=("Wordpress:" "WordPress is a content management system based on PHP." OFF)
#Options
ApacheOptions=("Option 1:" "Option 1 Desription" OFF)
ApacheOptions+=("Option 2: " "Option 2 Desription" OFF)
fi
if [ $IMODE = l ]; then
#WebServers
webservers=("Nginx" "Apache" "Quit")
##Nginx
#CMSList
NginxCMSL=("Wordpress" "Nextcloud" "None")
#Options
NginxOptions=("Ngx Option 1:" "Ngx Option 2:" "Ngx Option 3:")


##Apache
#CMSList
ApacheCMSL=("Wordpress" "Nextcloud" "None")
#Options
ApacheOptions=("Apa Option 1:" "Apa Option 2:" "Apa Option 3:")
fi

##---------------------##
#   Always-on modules   #
##---------------------##
aonoption="/MySQL/"
aonoption="$aonoption /Unattended-Security-Updates/"

##---------------##
#    Functions    #
##---------------##

msg () {
if [ $IMODE = n ]; then
TERM=ansi whiptail --title "Info" --infobox "$1" 8 52
fi
if [ $IMODE = l ]; then
echo "$1"
fi
}

function PasswordQuest {
passdiaone=$(whiptail --nocancel --passwordbox "Please enter your password (Requires 8 chars, uper & lower case, special and numerical)" 11 91 --title "Config" 3>&1 1>&2 2>&3)
if [ -z $passdiaone ]; then PasswordQuest; fi
if [[ ${#passdiaone} -ge 8 && "$passdiaone" == *[[:lower:]]* && "$passdiaone" == *[[:upper:]]* && "$passdiaone" == *[0-9]* && "$passdiaone" == *['!'@#%^\&*()_+]* ]]; then
    PasswordCheck
else
    whiptail --ok-button Done --msgbox "   Password is invalid!" 10 30
    unset passdiaone
    PasswordQuest
fi
}

function PasswordCheck {
#Checking password
passdiatwo=$(whiptail --nocancel --passwordbox "                         Please re-enter your password" 11 82 --title "Config" 3>&1 1>&2 2>&3)
if [ -z $passdiatwo ]; then
    PasswordCheck
    else
    if [ $passdiaone != $passdiatwo ]; then
        whiptail --ok-button Done --msgbox " Password does not match!" 10 30
        PasswordQuest
    else
        password="$passdiaone"
        unset passdiaone passdiatwo
    fi
fi
}



function LegacyPasswordQuest {
echo "Enter password (Requires: 8 chars, 1 capital and 1 num)"
read -s passdiaone
if [ -z $passdiaone ]; then LegacyPasswordQuest; fi
if [[ ${#passdiaone} -ge 8 && "$passdiaone" == *[[:lower:]]* && "$passdiaone" == *[[:upper:]]* && "$passdiaone" == *[0-9]* && "$passdiaone" == *['!'@#%^\&*()_+]* ]]; then
    LegacyPasswordCheck
else
    echo "Password is invalid!"
    unset passdiaone
    LegacyPasswordQuest
fi
}

function LegacyPasswordCheck {
#Checking password
echo "Please re-enter your password"
read -s passdiatwo
if [ -z $passdiatwo ]; then
    LegacyPasswordCheck
else
    if [ $passdiaone != $passdiatwo ]; then
        echo "Password does not match!"
        LegacyPasswordQuest
    else
        password="$passdiaone"
        unset passdiaone passdiatwo
    fi
fi
}


##--------------------------##
#   Installer-Requirements   #
##--------------------------##

msg "              Starting installer" 8 78
$PKGM update > $OUTPUT 2>&1
$PKGI curl > $OUTPUT 2>&1


##--------##
#   Menu   #
##--------##

if [ $IMODE = n ]; then
if [ $TestMode = 0 ]; then
domain=$(whiptail --nocancel --inputbox "                        Enter the domain without WWW     " 11 82 --title "Config" 3>&1 1>&2 2>&3)
if (whiptail --title "Config" --yesno "                 Does www.${domain} exist in DNS" 8 78); then domainwww=1; else domainwww=0; fi
if (whiptail --title "Config" --yesno "                          Hostname with nxdi.nl" 11 78); then
    hostname=$(whiptail --nocancel --inputbox "                      SystemID (eg: VCH001) without ".nxdi.nl"     " 11 82 --title "Config" 3>&1 1>&2 2>&3)
    hostname=$hostname".nxdi.nl"
else
    hostname=$(whiptail --nocancel --inputbox "                              Hostname" 11 78 --title "Config" 3>&1 1>&2 2>&3)
fi
if (whiptail --title "Config" --yesno "                       Enable SSL on installation?" 11 78); then
   sslenable=1
else
   sslenable=0
fi
PasswordQuest
email=$(whiptail --nocancel --inputbox "                     Enter the administrator e-mail" 11 78 --title "Config" 3>&1 1>&2 2>&3)
fi
webserv=$(whiptail --title "Select Webserver" --radiolist "WebServer" 11 53 5  "${webservers[@]}" 3>&1 1>&2 2>&3)
esws=$?
[[ "$esws" = 1 ]] && msg "              Quiting installer" 8 78 && exit;
fi

if [ $IMODE = l ]; then
echo "" >/dev/null
if [ $TestMode = 0 ]; then
echo "Enter the domain without WWW:"
read domain
while true; do
    read -p "Does www.${domain} exist in DNS -> yes/no?" yn
    case $yn in
        [Yy]* ) domainwww=1
        break;;
        [Nn]* ) domainwww=0
        break;;
        * ) echo "Choose yes of no.";;
    esac
done
while true; do
    read -p "Hostname with nxdi.nl -> yes/no?" yn
    case $yn in
        [Nn]* )
        echo 'Enter full hostname:'
        read hostname
        break;;
        [Yy]* )
        echo 'Hostname (eg: VCH001) without ".nxdi.nl":'
        read hostname
        hostname=$hostname".nxdi.nl"
        break;;
        * )echo "Choose yes or no.";;
    esac
done
while true; do
    read -p "Enable SSL on installation? -> yes/no?" yn
    case $yn in
        [Yy]* ) sslenable=1
        break;;
        [Nn]* ) sslenable=0
        break;;
        * ) echo "Choose yes of no.";;
    esac
done
LegacyPasswordQuest
echo "Administrator E-mail:"
read email
fi

echo "Select Webserver:"
select webserv in "${webservers[@]}"; do
    case $webserv in
        "Quit") exit ;;
        "") echo 'Invalid choice' >&2 ;;
        *)  break
    esac
done

fi

webserv="${webserv//:}" && webserv="${webserv,,}"

#Setting Menulist to webserver
if [[ $webserv = "apache" ]]; then
#Apache Menulist
CMSL=("${ApacheCMSL[@]}")
options=("${ApacheOptions[@]}")
fi
if [[ $webserv = "nginx" ]]; then
#nginx Menulist
CMSL=("${NginxCMSL[@]}")
options=("${NginxOptions[@]}")
fi

echo "Generating apt list for Generic"
curl --silent --show-error "$repo"/raw/branch/"$branch"/CoreModules/generic/apt.list >>/tmp/apt.list
printf " " >>/tmp/apt.list

echo "Generating apt list for Webserver"
curl --silent --show-error "$repo"/raw/branch/"$branch"/CoreModules/"$webserv"/apt.list >>/tmp/apt.list
printf " " >>/tmp/apt.list


##----------##
#   Addons   #
##----------##

if [ $IMODE = n ]; then
option=$(whiptail --nocancel --title "Title" --checklist "Features" 11 110 5 "${options[@]}" 3>&1 1>&2 2>&3)
fi
if [ $IMODE = l ]; then
choice () {
local choice=$1
if [[ ${opts[choice]} ]] # toggle
then
opts[choice]=
topt=${opt//+/}
option=${option//"$topt"/}
unset $topt
else
opts[choice]=+
option="$option $opt"
fi
}
echo "The first slection will always return invalid option, please enter the first option twice"
PS3='Which addons should be installed?'
while :
do
echo ""
unset options2
unset OPTcounter
for E in "${options[@]}"; do
    ((OPTcounter++))
    options2+=("${E} ${opts["$OPTcounter"]}")
done
options2+=("Done")

select opt in "${options2[@]}"
do
    case $opt in
        "Done") break 2;;
        "") printf '%s\n' 'invalid option';;
        *) choice $REPLY
        break
        ;;
    esac
done
done 
fi

#Cleaning options from menu
option="${option,,}" && option="${option// /}" && option="${option//:/ }" && option="${option//'"'}"
#Combining selected option with always-on options
option="$option""$aonoption"

echo "Generating apt list for Options"
for val1 in ${option[*]}; do
    echo "$val1" #TMP
    modListed=$(wget -t7 -qO - "$repo"/raw/branch/master/extModules.list|grep "$val1")
    #Checking
    if test -z "$modListed"
    then
        #Fetching from local repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/apt.list; then
           curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/apt.list >>/tmp/apt.list
           printf " " >>/tmp/apt.list
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-apt.list; then
           curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-apt.list >>/tmp/apt.list
           printf " " >>/tmp/apt.list
        fi
    else
        #Fetching from remote repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed"apt.list; then
           curl --retry 7 --retry-delay 5 -s "$modListed"apt.list >>/tmp/apt.list
           printf " " >>/tmp/apt.list
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed""$webserv"-apt.list; then
           curl "$modListed""$webserv"-apt.list >>/tmp/apt.list
           printf " " >>/tmp/apt.list
        fi
    fi
done

##-------##
#   CMS   #
##-------##

if [ $IMODE = n ]; then
function CMSM {
CMS=$(whiptail --nocancel --title "What CMS should be installed?" --radiolist "Features" 11 118 5 "${CMSL[@]}" 3>&1 1>&2 2>&3)
if [ -z $CMS ]; then CMSM; fi
}
CMSM
fi

if [ $IMODE = l ]; then
echo "What CMS should be installed?"
#CMSPromt
select CMS in "${CMSL[@]}"; do
    case CMS in
        "") echo 'Invalid choice' >&2 ;;
        *)  break
    esac
done
fi

CMS="${CMS//:}" && CMS="${CMS,,}"
echo "Generating Apt List for CMS"

if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/apt.list >>/tmp/apt.list; then
   curl "$repo"/raw/branch/"$branch"/CMS/"$CMS"/apt.list >>/tmp/apt.list
   printf " " >>/tmp/apt.list
fi

if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-apt.list; then
 curl "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-apt.list >>/tmp/apt.list
 printf " " >>/tmp/apt.list

fi


##-------------------##
#   Pre-configuring   #
##-------------------##

msg "                Preconfiguring"

echo "Running preconf for generic"
source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CoreModules/generic/preconf.sh)

echo "Running preconf for Webserv"
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CoreModules/"$webserv"/preconf.sh; then
    source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CoreModules/"$webserv"/preconf.sh)
fi

echo "Running preconf for Options"
for val1 in ${option[*]}; do
    echo "$val1" #TMP
    modListed=$(wget -t7 -qO - "$repo"/raw/branch/master/extModules.list|grep "$val1")
    #Checking
    if test -z "$modListed"
    then
        #Fetching from local repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/preconf.sh; then
        source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/preconf.sh)
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-preconf.sh; then
            source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-preconf.sh)
        fi
    else
        #Fetching from remote repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed"preconf.sh; then
        source <(curl --retry 7 --retry-delay 5 -s "$modListed"preconf.sh)
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed""$webserv"-preconf.sh; then
            source <(curl --retry 7 --retry-delay 5 -s "$modListed""$webserv"-preconf.sh)
        fi
    fi
done


echo "Running preconf for CMS"
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/preconf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CMS/"$CMS"/preconf.sh)
fi

if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-preconf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-preconf.sh)
fi


##-------------##
#   Installer   #
##-------------##

$PKGM update
sed -i 's/PHPver/'$phpver'/g' /tmp/apt.list
cat /tmp/apt.list | xargs $PKGI


##---------------##
#   Configuring   #
##---------------##

echo "Running conf for generic"
source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CoreModules/generic/conf.sh)

echo "Running conf for Webserv"
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CoreModules/"$webserv"/conf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CoreModules/"$webserv"/conf.sh)
fi

echo "Running conf for Options"
for val1 in ${option[*]}; do
    echo "$val1" #TMP
    modListed=$(wget -t7 -qO - "$repo"/raw/branch/master/extModules.list|grep "$val1")
    #Checking
    if test -z "$modListed" 
    then
        #Fetching from local repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/conf.sh; then
        source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/conf.sh)
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-conf.sh; then
            source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/SubModules/"$val1"/"$webserv"-conf.sh)
        fi
    else
        #Fetching from remote repo
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed"conf.sh; then
        source <(curl --retry 7 --retry-delay 5 -s "$modListed"conf.sh)
        fi
        if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$modListed""$webserv"-conf.sh; then
            source <(curl --retry 7 --retry-delay 5 -s "$modListed""$webserv"-conf.sh)
        fi
    fi
done


echo "Setting up SSL"
if [ $sslenable = 1 ]; then
if [ $domainwww = 1 ]; then
    certbot --"$webserv" -n -d "$domain" -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
elif [ $domainwww = 0 ]; then
    certbot --"$webserv" -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
fi
    certbot --"$webserv" -n -d "$hostname" -m "$email" --hsts --redirect --no-eff-email --agree-tos
fi

wget -q -t7 "$repo"/raw/branch/"$branch"/Scripts/EnableSSL.sh -O ~/activateSSL-$domain.sh
sed -i -e 's/DOMAINname/'$domain'/' -e 's/CONFname/'$domain'/' -e 's/DomainWWW/'$domainwww'/' -e 's/Email/'$email'/' -e 's/WebServer/'$webserv'/' ~/activateSSL-$domain.sh

wget -q -t7 "$repo"/raw/branch/"$branch"/Scripts/EnableSSL.sh -O ~/activateSSL-Backend.sh
sed -i -e 's/DOMAINname/'$hostname'/' -e 's/CONFname/'Backend'/' -e 's/DomainWWW/'0'/' -e 's/Email/'$email'/' -e 's/WebServer/'$webserv'/' ~/activateSSL-Backend.sh

echo "Running conf for CMS"
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/conf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CMS/"$CMS"/conf.sh)
fi
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-conf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CMS/"$CMS"/"$webserv"-conf.sh)
fi

echo "Running conf for Backend"
if curl --retry 2 --retry-delay 1 --output /dev/null --silent --head --fail "$repo"/raw/branch/"$branch"/CMS/Backend/"$webserv"-conf.sh; then
 source <(curl --retry 7 --retry-delay 5 -s "$repo"/raw/branch/"$branch"/CMS/Backend/"$webserv"-conf.sh)
fi


##------------##
#   Services   #
##------------##

systemctl restart sshd