#!/usr/bin/with-contenv bashio
# ==============================================================================
# Community Hass.io Add-ons: WireGuard
# Creates the interface configuration
# ==============================================================================
readonly CONFIG="/etc/wireguard/wg0.conf"
declare addresses
declare allowed_ips
declare config_dir
declare dns
declare endpoint
declare host
declare keep_alive
declare name
declare port
declare pre_shared_key
declare private_key
declare public_key

echo "[Interface]" > "${CONFIG}"

# Add all server addresses to the configuration
for address in $(bashio::config 'server.addresses'); do
    echo "Address = ${address}" >> "${CONFIG}"
done

# Add all server DNS addresses to the configuration
for dns in $(bashio::config 'server.dns'); do
    echo "DNS = ${dns}" >> "${CONFIG}"
done

# Add the server's private key to the configuration
if bashio::config.has_value 'server.private_key'; then
    private_key=$(bashio::config 'server.private_key')
else
    if ! bashio::fs.file_exists '/ssl/wireguard/private_key'; then
        umask 077 || bashio::exit.nok "Could not set a proper umask"
        wg genkey > /ssl/wireguard/private_key ||
            bashio::exit.nok "Could not generate private key!"
    fi
    private_key=$(</ssl/wireguard/private_key)
fi

{
    echo "PrivateKey = ${private_key}";

    # Adds server port to the configuration
    echo "ListenPort = 51820";

    # End configuration file with an empty line
    echo "";
} >> "${CONFIG}"

# Fetch all the peers
for peer in $(bashio::config 'peers|keys'); do

    name=$(bashio::config "peers[${peer}].name")
    config_dir="/ssl/wireguard/${name}"

    mkdir -p "${config_dir}" ||
        bashio::exit.nok "Failed creating client folder for ${name}"

    # Write peer header
    echo "[Peer]" >> "${CONFIG}"

    # Get the public key
    if bashio::config.has_value "peers[${peer}].public_key"; then
        public_key=$(bashio::config "peers[${peer}].public_key")
    elif bashio::fs.file_exists "${config_dir}/public_key"; then
        public_key=$(<"${config_dir}/public_key")
    else
        umask 077 || bashio::exit.nok "Could not set a proper umask"
        wg genkey > "${config_dir}/private_key" ||
            bashio::exit.nok "Could not generate private key for ${name}!"

        wg pubkey < "${config_dir}/private_key" > "${config_dir}/public_key" ||
            bashio::exit.nok "Could not get public key for ${name}!"

        public_key=$(<"${config_dir}/public_key")
    fi

    echo "PublicKey = ${public_key}" >> "${CONFIG}"

    # Addresses in peer configuration become AllowedIPS from server side.
    allowed_ips=$(bashio::config "peers[${peer}].addresses | join(\", \")")
    echo "AllowedIPs = ${allowed_ips}" >> "${CONFIG}"

    if bashio::config.has_value "peers[${peer}].persistent_keep_alive"; then
        keep_alive=$(bashio::config "peers[${peer}].persistent_keep_alive")
        echo "PersistentKeepalive = ${keep_alive}" >> "${CONFIG}"
    fi

    if bashio::config.has_value "peers[${peer}].pre_shared_key"; then
        pre_shared_key=$(bashio::config "peers[${peer}].pre_shared_key")
        echo "PreSharedKey = ${pre_shared_key}" >> "${CONFIG}"
    fi

    if bashio::config.has_value "peers[${peer}].endpoint"; then
        endpoint=$(bashio::config "peers[${peer}].endpoint")
        echo "Endpoint = ${endpoint}" >> "${CONFIG}"
    fi

    # End file with an empty line
    echo "" >> "${CONFIG}"

    # Generate client config
    echo "[Interface]" > "${config_dir}/client.conf"

    if bashio::fs.file_exists "${config_dir}/private_key"; then
        private_key=$(<"${config_dir}/private_key")
        echo "PrivateKey = ${private_key}" >> "${config_dir}/client.conf"
    fi

    addresses=$(bashio::config "peers[${peer}].addresses | join(\", \")")
    dns=$(bashio::config "server.dns | join(\", \")")
    public_key=$(wg pubkey < /data/private_key)
    host=$(bashio::config 'server.host')
    port=$(bashio::addon.port "51820/udp")
    allowed_ips=$(bashio::config "peers[${peer}].allowed_ips | join(\", \")")

    {
        echo "Address = ${addresses}"
        echo "DNS = ${dns}"
        echo ""
        echo "[Peer]"
        echo "PublicKey = ${public_key}"
        echo "Endpoint = ${host}:${port}"
        echo "AllowedIPs = ${allowed_ips}"
        echo ""
    } >> "${config_dir}/client.conf"

    qrencode -t PNG -o "${config_dir}/qrcode.png" < "${config_dir}/client.conf"
done