#!/usr/bin/env bash
# Rebuild the dashboard image, restart the container, point the shared nginx at
# it. Safe to re-run any time — this is the normal "ship a change" command.
set -euo pipefail
cd "$(dirname "$0")"

log()  { printf '\n\033[1;34m==> %s\033[0m\n' "$1"; }
fail() { printf '\n\033[1;31mERROR: %s\033[0m\n' "$1" >&2; exit 1; }

[ -f .env ] || fail "no .env — copy .env.example to .env and fill it in"
set -a; . ./.env; set +a
: "${FIRMER_HOST:?set FIRMER_HOST in .env}"
SHARED_STACK="${SHARED_STACK:-/opt/autotrader/deploy}"

command -v envsubst >/dev/null || fail "envsubst missing — apt-get install -y gettext-base"
[ -d "$SHARED_STACK/nginx/conf.d" ] || fail "no nginx/conf.d under $SHARED_STACK"

log "Building and starting"
docker compose up -d --build

log "Waiting for the container to report healthy"
for _ in $(seq 1 30); do
    state=$(docker inspect autofirmer --format '{{.State.Health.Status}}' 2>/dev/null || echo missing)
    [ "$state" = healthy ] && break
    sleep 2
done
[ "${state:-}" = healthy ] || fail "autofirmer is $state — check: docker logs autofirmer"

# Rendered into the *other* stack's conf.d, because that is the directory its
# nginx has mounted. The file is untracked there, and survives that stack's
# deploys and pulls; only its bootstrap-tls.sh wipes conf.d, and re-running this
# script puts it back.
#
# Held back until the certificate exists: nginx refuses to load a server block
# whose ssl_certificate is missing, and a broken file in that directory would
# also abort the autotrader deploys that reload the same nginx.
if docker run --rm -v autotrader-vps_letsencrypt:/le alpine \
        test -f "/le/live/$FIRMER_HOST/fullchain.pem" 2>/dev/null; then
    template=nginx/firmer.conf.template
else
    log "No certificate for $FIRMER_HOST yet — rendering the HTTP-only config"
    log "Run ./bootstrap-tls.sh once DNS points here, then this script again"
    template=nginx/firmer-acme.conf.template
fi

log "Rendering $template"
# Named explicitly so envsubst leaves nginx's own $host, $remote_addr and the
# rest alone.
envsubst '${FIRMER_HOST}' < "$template" > "$SHARED_STACK/nginx/conf.d/firmer.conf"

log "Reloading the shared nginx"
docker exec nginx nginx -t
docker exec nginx nginx -s reload

log "Status"
docker compose ps