#!/bin/bash
#
# Start script for the SWISH docker
#
# This script is started in /data.  
# SWISH is in /home/swish; otherwise this is unchanged from https://github.com/SWI-Prolog/docker-swish

configdir=config-enabled
configavail=/home/swish/config-available
start=--no-fork
ssl=
scheme=http
udaemon=daemon
uconfig=root
config_run=no

usage()
{ echo "Usage: docker run [docker options] swish [swish options]"
  echo "swish options:"
  echo "  --help                 Display this message"
  echo "  --bash		 Just run bash in the container"
  echo "  --auth=type            Configure authentication>:"
  echo "         always          Force HTTP authentication"
  echo "         social          Allow HTTP and oauth2 authentication"
  echo "         anonymous       No authentication"
  echo "  --add-user		 Add a new user"
  echo "  --http		 Create an HTTP server"
  echo "  --https		 Create an HTTPS server"
  echo "  --CN=host		 Hostname for certificate"
  echo "  --O=organization	 Organization for certificate"
  echo "  --C=country		 Country for certificate"
  echo "  --run			 Start SWISH after config options"
  echo "  --list-config		 List configuration files"
  echo "  --add-config file ...	 Add a configuration file"
  echo ""
  echo "--add-config should be the last option if used."
}

add_user()
{ if [ -t 0 ]; then
    swipl -g swish_add_user -t halt ${SWISH_HOME}/lib/plugin/http_authenticate.pl
  else
    echo "ERROR: SWISH: must run in interactive mode to setup initial user"
    exit 1
  fi
}

# `mkuser file user` creates user with the uid and gid of file.

mkuser()
{ f="$1"
  u="$2"

  groupadd "$(ls -nd "$f" | awk '{printf "-g %s\n",$4 }')" -o $u
  useradd  "$(ls -nd "$f" | awk '{printf "-u %s\n",$3 }')" -g $u -o $u
}

setup_initial_user()
{ if [ ! -f passwd ]; then
    add_user
  fi
}

add_config()
{ while [ ! "$1" == "" ]; do
    cp "$configavail/$1" "$configdir/$1"
    chown $uconfig.$uconfig "$configdir/$1"
    shift
  done
}

del_config()
{ while [ ! "$1" == "" ]; do
    if [ -e "$configdir/$1" ]; then rm "$configdir/$1"; fi
    shift
  done
}

list_config()
{ for c in $(ls $configavail); do
    case "$c" in
      *.pl)
	if [ -e "$configdir/$c" -a ! "$c" = README.md -a ! "$c" = "gitty" ]; then
	  if cmp -s "$configavail/$c" "$configdir/$c"; then
	    printf "  %25s (installed, not modified)\n" $c
	  else
	    printf "  %25s (installed, modified)\n" $c
	  fi
	else
	  printf "  %25s (not installed)\n" $c
	fi
	;;
    esac
  done

  for c in $(ls $configdir); do
    if [ ! -e "$configavail/$c" ]; then
      printf "  %25s (local only)\n" $c
    fi
  done
}

auth_config_social()
{ del_config auth_http_always.pl

  setup_initial_user
  add_config auth_http.pl auth_google.pl auth_stackoverflow.pl
}

auth_config_always()
{ del_config auth_http.pl auth_google.pl auth_stackoverflow.pl

  setup_initial_user
  add_config auth_http_always.pl
}

config_auth()
{ case "$1" in
    always)	auth_config_always
		;;
    anon*)	del_config auth_http.pl auth_google.pl \
			   auth_stackoverflow.pl auth_http_always.pl
		;;
    social)	auth_config_social
		;;
    *)		usage
		exit 1
  esac
}


# If there is a data directory, reuse it and set our user to be the
# native user of this directory.

if [ -d data ]; then
  mkuser data swish
  udaemon=swish
else
  mkdir data
  chown $udaemon.$udaemon data
fi

if [ -d $configdir ]; then
  mkuser $configdir config
  uconfig=config
else
  mkuser . config
  uconfig=config
  mkdir $configdir
  chown $uconfig.$uconfig "$configdir"
	# Add default configuration
  add_config README.md
  add_config user_profile.pl
  add_config notifications.pl
  add_config email.pl
  add_config clpqr.pl
fi

if [ -t 0 ] ; then
  start=--interactive
fi

if [ -r https/server.crt -a -r https/server.key ]; then
  scheme=https
fi

did_config=no

while [ ! -z "$1" ]; do
  case "$1" in
    --bash)		/bin/bash
			did_config=yes
			shift
			;;
    --auth=*)		auth="$(echo $1 | sed 's/[^=]*=//')"
			config_auth $auth
			did_config=yes
			shift
			;;
    --add-user)		add_user
			did_config=yes
			shift
			;;
    --add-config)	shift
			add_config $*
			did_config=yes
			break
			;;
    --list-config)	list_config
			did_config=yes
			shift
			;;
    --http)		scheme=http
			shift
			;;
    --https)		scheme=https
			shift
			;;
    --CN=*|--O=*|--C=*)	ssl="$ssl $1"
			shift
			;;
    --run)		config_run=yes
			shift
			;;
    --help)		usage
			exit 0
			;;
    *)			usage
			exit 1
			;;
  esac
done

if [ $did_config = yes -a $config_run = no ]; then
  exit 0
fi

if [ -S /rserve/socket ]; then
  add_config r_serve.pl
  echo ":- set_setting_default(rserve:socket, '/rserve/socket')." >> $configdir/r_serve.pl
fi

${SWISH_HOME}/daemon.pl --${scheme}=3050 ${ssl} --user=$udaemon $start