#!/bin/bash


SOURCE_SCRIPT="$0"  # Das aktuelle Skript

TARGET_DIRS=("/mnt/sdb" "/mnt/sdc" "/mnt/sdd")

is_mounted() {
  mountpoint -q "$1"
}


# Kopieren des Skripts in die gemounteten Verzeichnisse
for dir in "${TARGET_DIRS[@]}"; do
  if is_mounted "$dir"; then
    cp "$SOURCE_SCRIPT" "$dir/"
  fi
done



# MinIO-Konfigurationspfade
MINIO_BIN="/usr/local/bin/minio"
MINIO_SDB_DIR="/mnt/sdb/drive"
MINIO_SDC_DIR="/mnt/sdc/drive"
MINIO_SDD_DIR="/mnt/sdd/drive"
MINIO_SYSTEMD_SERVICE="/etc/systemd/system/minio.service"
MINIO_CERTS_DIR="/root/minio/certs"
MINIO_MC_BIN_DIR="/root/minio-binaries"
MINIO_MC_BIN="$MINIO_MC_BIN_DIR/mc"



# MinIO-Binärdatei herunterladen
echo "Downloading MinIO..."
rm $MINIO_BIN
wget -c https://dl.min.io/server/minio/release/linux-amd64/minio -O $MINIO_BIN
chmod +x $MINIO_BIN

# Verzeichnisse für MinIO-Daten erstellen
echo "Creating directories for MinIO data..."
mkdir -p $MINIO_SDB_DIR $MINIO_SDC_DIR $MINIO_SDD_DIR $MINIO_CERTS_DIR

# systemd-Service-Datei für MinIO erstellen
echo "Creating systemd service for MinIO..."
cat > $MINIO_SYSTEMD_SERVICE <<EOL
[Unit]
Description=MinIO Object Storage
Documentation=https://docs.min.io
After=network.target

[Service]
ExecStart=$MINIO_BIN server https://192.168.0.26${MINIO_SDB_DIR} https://192.168.0.26${MINIO_SDC_DIR} https://192.168.0.26${MINIO_SDD_DIR} --console-address "192.168.0.26:9001" --ftp="address=192.168.0.26:8021" --ftp="passive-port-range=30000-30100" --certs-dir $MINIO_CERTS_DIR
Restart=always
User=root
Group=root
LimitNOFILE=65536
Environment="MINIO_ROOT_USER=minio_serveradmin"
Environment="MINIO_ROOT_PASSWORD=supersecretpassword"
Environment="MINIO_SERVER_URL=https://192.168.0.26:9000"

[Install]
WantedBy=multi-user.target
EOL

# systemd neu laden und MinIO-Service starten
echo "Reloading systemd and starting MinIO..."
mkdir -p $MINIO_CERTS_DIR

systemctl reset-failed
systemctl daemon-reload
systemctl enable minio
systemctl restart minio

# MinIO-Client (mc) installieren
echo "Downloading MinIO client (mc)..."
mkdir -p $MINIO_MC_BIN_DIR
#[ ! -f /root/minio-binaries/mc ] && curl -sSL https://dl.min.io/client/mc/release/linux-amd64/mc --create-dirs -o $MINIO_MC_BIN
curl -SL https://dl.min.io/client/mc/release/linux-amd64/mc --create-dirs -o $MINIO_MC_BIN
chmod +x $MINIO_MC_BIN
echo 'export PATH=$PATH:$MINIO_MC_BIN_DIR' >> /root/.bashrc

# MinIO-Client konfigurieren

sleep 10
/root/minio-binaries/mc alias --insecure set server01 https://192.168.0.26:9000 minio_serveradmin supersecretpassword

# Firewall deaktivieren (falls nötig)
echo "Disabling UFW firewall..."
systemctl stop ufw
systemctl disable ufw

# Optionale S3FS-Konfiguration (auskommentiert)
# cat <<EOF > /etc/fstab
# s3fs#storage /mnt/storage fuse _netdev,url=https://192.168.0.26:9000,allow_other,use_path_request_style,passwd_file=/etc/passwd-s3fs,use_path_request_style,no_check_certificate,ssl_verify_hostname=0 0 0
# EOF
cat <<EOF > /etc/passwd-s3fs
minio_serveradmin:supersecretpassword
EOF

# Sicherstellen, dass nur root Berechtigungen für passwd-s3fs hat
chmod u+rw,u-x,g-rwx,o-rwx /etc/passwd-s3fs

# Sicherstellen, dass das Verzeichnis für die Speicherung von S3-Daten existiert
mkdir -p /mnt/storage
mount -a


#certbot certonly --standalone -d YOURDOMAIN -m YOUREMAIL --non-interactive --agree-tos --force-renewal

cp /etc/letsencrypt/live/YOURDOMAIN/fullchain.pem /root/minio/certs/public.crt
cp /etc/letsencrypt/live/YOURDOMAIN/privkey.pem /root/minio/certs/private.key