#!/bin/bash

# Script de déploiement unifié pour GEOSECTOR API
# Version: 4.0 (Janvier 2025)
# Auteur: Pierre (avec l'aide de Claude)
#
# Usage:
#   ./deploy-api.sh          # Déploiement local DEV (code → container geo)
#   ./deploy-api.sh rca      # Livraison RECETTE (container geo → rca-geo)
#   ./deploy-api.sh pra      # Livraison PRODUCTION (rca-geo → pra-geo)

set -euo pipefail

# =====================================
# Configuration générale
# =====================================

# Paramètre optionnel pour l'environnement cible
TARGET_ENV=${1:-dev}

# Configuration SSH
HOST_KEY="/home/pierre/.ssh/id_rsa_mbpi"
HOST_PORT="22"
HOST_USER="root"

# Configuration des serveurs
RCA_HOST="195.154.80.116"  # IN3 - Serveur de recette
PRA_HOST="51.159.7.190"     # IN4 - Serveur de production

# Configuration Incus
INCUS_PROJECT="default"
API_PATH="/var/www/geosector/api"
FINAL_OWNER="nginx"
FINAL_GROUP="nginx"
FINAL_OWNER_LOGS="nobody"
FINAL_GROUP_LOGS="nginx"

# Configuration de sauvegarde
BACKUP_DIR="/data/backup/geosector/api"

# Couleurs pour les messages
GREEN='\033[0;32m'
RED='\033[0;31m'
YELLOW='\033[0;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

# =====================================
# Fonctions utilitaires
# =====================================

echo_step() {
    echo -e "${GREEN}==>${NC} $1"
}

echo_info() {
    echo -e "${BLUE}Info:${NC} $1"
}

echo_warning() {
    echo -e "${YELLOW}Warning:${NC} $1"
}

echo_error() {
    echo -e "${RED}Error:${NC} $1"
    exit 1
}

# Fonction pour nettoyer les anciens backups
cleanup_old_backups() {
    local prefix=""
    case $TARGET_ENV in
        "dev") prefix="api-dev-" ;;
        "rca") prefix="api-rca-" ;;
        "pra") prefix="api-pra-" ;;
    esac

    echo_info "Cleaning old backups (keeping last 10)..."
    ls -t "${BACKUP_DIR}"/${prefix}*.tar.gz 2>/dev/null | tail -n +11 | xargs -r rm -f && {
        REMAINING_BACKUPS=$(ls "${BACKUP_DIR}"/${prefix}*.tar.gz 2>/dev/null | wc -l)
        echo_info "Kept ${REMAINING_BACKUPS} backup(s) for ${TARGET_ENV}"
    }
}

# =====================================
# Détermination de la configuration selon l'environnement
# =====================================

case $TARGET_ENV in
    "dev")
        echo_step "Configuring for DEV deployment on IN3"
        SOURCE_TYPE="local_code"
        DEST_CONTAINER="dva-geo"
        DEST_HOST="${RCA_HOST}"  # IN3 pour le DEV aussi
        ENV_NAME="DEVELOPMENT"
        ;;
    "rca")
        echo_step "Configuring for RECETTE delivery"
        SOURCE_TYPE="remote_container"
        SOURCE_CONTAINER="dva-geo"
        SOURCE_HOST="${RCA_HOST}"
        DEST_CONTAINER="rca-geo"
        DEST_HOST="${RCA_HOST}"
        ENV_NAME="RECETTE"
        ;;
    "pra")
        echo_step "Configuring for PRODUCTION delivery"
        SOURCE_TYPE="remote_container"
        SOURCE_HOST="${RCA_HOST}"
        SOURCE_CONTAINER="rca-geo"
        DEST_CONTAINER="pra-geo"
        DEST_HOST="${PRA_HOST}"
        ENV_NAME="PRODUCTION"
        ;;
    *)
        echo_error "Unknown environment: $TARGET_ENV. Use 'dev', 'rca' or 'pra'"
        ;;
esac

echo_info "Deployment flow: ${ENV_NAME}"

# =====================================
# Création de l'archive selon la source
# =====================================

# Créer le dossier de backup s'il n'existe pas
if [ ! -d "${BACKUP_DIR}" ]; then
    echo_info "Creating backup directory ${BACKUP_DIR}..."
    mkdir -p "${BACKUP_DIR}" || echo_error "Failed to create backup directory"
fi

# Horodatage format YYYYMMDDHH
TIMESTAMP=$(date +%Y%m%d%H)

# Nom de l'archive selon l'environnement
case $TARGET_ENV in
    "dev")
        ARCHIVE_NAME="api-dev-${TIMESTAMP}.tar.gz"
        ;;
    "rca")
        ARCHIVE_NAME="api-rca-${TIMESTAMP}.tar.gz"
        ;;
    "pra")
        ARCHIVE_NAME="api-pra-${TIMESTAMP}.tar.gz"
        ;;
esac

ARCHIVE_PATH="${BACKUP_DIR}/${ARCHIVE_NAME}"

if [ "$SOURCE_TYPE" = "local_code" ]; then
    # DEV: Créer une archive depuis le code local
    echo_step "Creating archive from local code..."
    
    # Vérification des fichiers requis
    if [ ! -f "src/Config/AppConfig.php" ]; then
        echo_error "Configuration file missing"
    fi
    
    if [ ! -f "composer.json" ] || [ ! -f "composer.lock" ]; then
        echo_error "Composer files missing"
    fi
    
    tar --exclude='.git' \
        --exclude='.gitignore' \
        --exclude='.vscode' \
        --exclude='logs' \
        --exclude='*.template' \
        --exclude='*.sh' \
        --exclude='.env' \
        --exclude='*.log' \
        --exclude='.DS_Store' \
        --exclude='README.md' \
        --exclude="*.tar.gz" \
        --exclude='node_modules' \
        --exclude='vendor' \
        --exclude='*.swp' \
        --exclude='*.swo' \
        --exclude='*~' \
        -czf "${ARCHIVE_PATH}" . 2>/dev/null || echo_error "Failed to create archive"

    echo_info "Archive created: ${ARCHIVE_PATH}"
    echo_info "Archive size: $(du -h "${ARCHIVE_PATH}" | cut -f1)"
    
# Cette section n'est plus utilisée car RCA utilise maintenant remote_container
    
elif [ "$SOURCE_TYPE" = "remote_container" ]; then
    # RCA et PRA: Créer une archive depuis un container distant
    echo_step "Creating archive from remote container ${SOURCE_CONTAINER} on ${SOURCE_HOST}..."
    
    # Créer l'archive sur le serveur source
    ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} "
        incus project switch ${INCUS_PROJECT} &&
        incus exec ${SOURCE_CONTAINER} -- tar \
            --exclude='logs' \
            --exclude='uploads' \
            -czf /tmp/${ARCHIVE_NAME} -C ${API_PATH} .
    " || echo_error "Failed to create archive on remote"
    
    # Extraire l'archive du container vers l'hôte
    ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} "
        incus file pull ${SOURCE_CONTAINER}/tmp/${ARCHIVE_NAME} /tmp/${ARCHIVE_NAME} &&
        incus exec ${SOURCE_CONTAINER} -- rm -f /tmp/${ARCHIVE_NAME}
    " || echo_error "Failed to extract archive from remote container"
    
    # Copier l'archive vers la machine locale
    scp -i ${HOST_KEY} -P ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST}:/tmp/${ARCHIVE_NAME} ${ARCHIVE_PATH} || echo_error "Failed to copy archive locally"

    echo_info "Archive saved: ${ARCHIVE_PATH}"
    echo_info "Archive size: $(du -h "${ARCHIVE_PATH}" | cut -f1)"
fi

# Nettoyer les anciens backups
cleanup_old_backups

# =====================================
# Déploiement selon la destination
# =====================================

# Tous les déploiements se font maintenant sur des containers distants
if [ "$DEST_HOST" != "local" ]; then
    # Déploiement sur container distant (DEV, RCA ou PRA)
    echo_step "Deploying to remote container ${DEST_CONTAINER} on ${DEST_HOST}..."
    
    # Créer une sauvegarde sur le serveur de destination
    BACKUP_TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
    REMOTE_BACKUP_DIR="${API_PATH}_backup_${BACKUP_TIMESTAMP}"
    
    echo_info "Creating backup on destination..."
    ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${DEST_HOST} "
        incus project switch ${INCUS_PROJECT} &&
        incus exec ${DEST_CONTAINER} -- test -d ${API_PATH} &&
        incus exec ${DEST_CONTAINER} -- cp -r ${API_PATH} ${REMOTE_BACKUP_DIR} &&
        echo 'Backup created: ${REMOTE_BACKUP_DIR}'
    " || echo_warning "No existing installation to backup"
    
    # Transférer l'archive vers le serveur de destination
    echo_info "Transferring archive to ${DEST_HOST}..."
    
    if [ "$SOURCE_TYPE" = "local_code" ]; then
        # Pour DEV: copier depuis local vers IN3
        scp -i ${HOST_KEY} -P ${HOST_PORT} ${ARCHIVE_PATH} ${HOST_USER}@${DEST_HOST}:/tmp/${ARCHIVE_NAME} || echo_error "Failed to copy archive to destination"
    elif [ "$SOURCE_TYPE" = "remote_container" ] && [ "$SOURCE_HOST" = "$DEST_HOST" ]; then
        # Pour RCA: même serveur (IN3), pas de transfert nécessaire, l'archive est déjà là
        echo_info "Archive already on destination server (same host)"
    else
        # Pour PRA: l'archive est déjà sur la machine locale (copiée depuis IN3)
        # On la transfère maintenant vers IN4
        echo_info "Transferring archive from local to IN4..."
        scp -i ${HOST_KEY} -P ${HOST_PORT} ${ARCHIVE_PATH} ${HOST_USER}@${DEST_HOST}:/tmp/${ARCHIVE_NAME} || echo_error "Failed to copy archive to IN4"

        # Nettoyer sur le serveur source IN3
        ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} "rm -f /tmp/${ARCHIVE_NAME}" || echo_warning "Could not clean source server"
    fi
    
    # Déployer sur le container de destination
    echo_info "Extracting on destination container..."
    ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${DEST_HOST} "
        set -euo pipefail
        
        # Pousser l'archive dans le container
        incus project switch ${INCUS_PROJECT} &&
        incus file push /tmp/${ARCHIVE_NAME} ${DEST_CONTAINER}/tmp/${ARCHIVE_NAME} &&
        
        # Nettoyer sélectivement (préserver logs et uploads)
        incus exec ${DEST_CONTAINER} -- find ${API_PATH} -mindepth 1 -maxdepth 1 ! -name 'uploads' ! -name 'logs' -exec rm -rf {} \; 2>/dev/null || true &&
        
        # Extraire l'archive
        incus exec ${DEST_CONTAINER} -- tar -xzf /tmp/${ARCHIVE_NAME} -C ${API_PATH}/ &&
        
        # Permissions
        incus exec ${DEST_CONTAINER} -- chown -R ${FINAL_OWNER}:${FINAL_GROUP} ${API_PATH} &&
        incus exec ${DEST_CONTAINER} -- find ${API_PATH} -type d -exec chmod 755 {} \; &&
        incus exec ${DEST_CONTAINER} -- find ${API_PATH} -type f -exec chmod 644 {} \; &&
        
        # Permissions spéciales pour logs
        incus exec ${DEST_CONTAINER} -- test -d ${API_PATH}/logs &&
        incus exec ${DEST_CONTAINER} -- chown -R ${FINAL_OWNER_LOGS}:${FINAL_GROUP_LOGS} ${API_PATH}/logs &&
        incus exec ${DEST_CONTAINER} -- chmod -R 755 ${API_PATH}/logs || true &&
        
        # Permissions spéciales pour uploads
        incus exec ${DEST_CONTAINER} -- test -d ${API_PATH}/uploads &&
        incus exec ${DEST_CONTAINER} -- chown -R ${FINAL_OWNER_LOGS}:${FINAL_GROUP_LOGS} ${API_PATH}/uploads &&
        incus exec ${DEST_CONTAINER} -- chmod -R 755 ${API_PATH}/uploads || true &&
        
        # Composer
        incus exec ${DEST_CONTAINER} -- bash -c 'cd ${API_PATH} && composer install --no-dev --optimize-autoloader' || echo 'Composer install skipped' &&
        
        # Nettoyage
        incus exec ${DEST_CONTAINER} -- rm -f /tmp/${ARCHIVE_NAME} &&
        rm -f /tmp/${ARCHIVE_NAME}
    " || echo_error "Deployment failed on destination"
    
    echo_info "Remote backup saved: ${REMOTE_BACKUP_DIR} on ${DEST_CONTAINER}"
fi

# L'archive reste dans le dossier de backup, pas de nettoyage nécessaire
echo_info "Archive preserved in backup directory: ${ARCHIVE_PATH}"

# =====================================
# Résumé final
# =====================================

echo_step "Deployment completed successfully!"
echo_info "Environment: ${ENV_NAME}"

if [ "$TARGET_ENV" = "dev" ]; then
    echo_info "Deployed from local code to container ${DEST_CONTAINER} on IN3 (${DEST_HOST})"
elif [ "$TARGET_ENV" = "rca" ]; then
    echo_info "Delivered from ${SOURCE_CONTAINER} to ${DEST_CONTAINER} on ${DEST_HOST}"
elif [ "$TARGET_ENV" = "pra" ]; then
    echo_info "Delivered from ${SOURCE_CONTAINER} on ${SOURCE_HOST} to ${DEST_CONTAINER} on ${DEST_HOST}"
fi

echo_info "Deployment completed at: $(date)"

# Journaliser le déploiement
echo "$(date '+%Y-%m-%d %H:%M:%S') - API deployed to ${ENV_NAME} (${DEST_CONTAINER}) - Archive: ${ARCHIVE_NAME}" >> ~/.geo_deploy_history