#!/usr/bin/env bash
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"

DOCKER_CMD=()

resolve_docker_cmd() {
	if docker info >/dev/null 2>&1; then
		DOCKER_CMD=(docker)
		return 0
	fi

	if sudo -n docker info >/dev/null 2>&1; then
		DOCKER_CMD=(sudo docker)
		return 0
	fi

	if command -v sudo >/dev/null 2>&1 && [ -t 0 ]; then
		echo "Docker-Zugriff ohne Gruppe erkannt. Verwende sudo docker (ggf. Passwortabfrage)."
		if sudo docker info >/dev/null 2>&1; then
			DOCKER_CMD=(sudo docker)
			return 0
		fi
	fi

	echo "[FEHLER] Kein Zugriff auf den Docker Daemon (/var/run/docker.sock)." >&2
	echo "Führe das Script mit sudo aus oder füge deinen User zur docker-Gruppe hinzu:" >&2
	echo "  sudo usermod -aG docker $USER" >&2
	echo "Danach neu einloggen und Script erneut starten." >&2
	exit 3
}

export SESSION_COOKIE_SECURE="0"
export INSTANCE_TLS_MODE="development"
export INSTANCE_PARENT_DOMAIN="${INSTANCE_PARENT_DOMAIN:-meine-domain}"
export DEV_HOSTS_REFRESH_INTERVAL="${DEV_HOSTS_REFRESH_INTERVAL:-30}"

echo "Launching WEBSITE stack"
echo "  SESSION_COOKIE_SECURE=$SESSION_COOKIE_SECURE"
echo "  INSTANCE_TLS_MODE=$INSTANCE_TLS_MODE"
echo "  INSTANCE_PARENT_DOMAIN=$INSTANCE_PARENT_DOMAIN"
echo "  DEV_HOSTS_REFRESH_INTERVAL=$DEV_HOSTS_REFRESH_INTERVAL"

# Ensure required runtime files exist before building
if [ ! -f "$SCRIPT_DIR/gunicorn.conf.py" ]; then
	echo "[FEHLER] gunicorn.conf.py fehlt in $SCRIPT_DIR. Bitte prüfen." >&2
	exit 2
fi

resolve_docker_cmd

"${DOCKER_CMD[@]}" compose build website
"${DOCKER_CMD[@]}" compose up -d

# Wait for website to become healthy (simple HTTP check)
check_url="http://localhost:4999"
timeout_seconds=60
interval=2
elapsed=0

echo "Warte auf Website (${check_url}) bis ${timeout_seconds}s..."
while [ $elapsed -lt $timeout_seconds ]; do
	if curl -sS --max-time 2 "$check_url" >/dev/null 2>&1; then
		echo "Website erreichbar nach ${elapsed}s"
		break
	fi
	sleep $interval
	elapsed=$((elapsed + interval))
done

if [ $elapsed -ge $timeout_seconds ]; then
	echo "[FEHLER] Website nicht erreichbar nach ${timeout_seconds}s. Sammle Diagnosedaten..."
	echo "--- docker compose ps ---"
	"${DOCKER_CMD[@]}" compose ps || true
	echo "--- docker logs website (tail 200) ---"
	"${DOCKER_CMD[@]}" logs --tail 200 website-website-1 || true
	echo "Bitte prüfe Container-Logs und nginx-Konfiguration."
fi

echo "Website stack is running on http://localhost:4999"
echo "Provisioning creates self-signed certs per subdomain when needed."