#!/bin/bash

toolName="jitsi-meet"

step_1_info() { echo "Installation of prerequisits"; }
step_1_alias() { echo "prepare"; }
step_1() {
  exe apt install gnupg2 git lsb-release ssl-cert ca-certificates apt-transport-https \
    tree locate software-properties-common dirmngr screen htop nano net-tools zip unzip \
    curl ffmpeg ghostscript libfile-fcntllock-perl curl socat
}

step_2_info() { echo "Add universe and official nginx apt repositories"; }
step_2() {
  apt-add-repository universe
  exep "echo \"deb [arch=amd64] http://nginx.org/packages/mainline/ubuntu $(lsb_release -cs) nginx\" | tee /etc/apt/sources.list.d/nginx.list"
  exep "curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo apt-key add -"
}

step_3_info() { echo "Add official $toolName apt repository"; }
step_3() {
  exep "echo \"deb https://download.jitsi.org stable/\" | tee /etc/apt/sources.list.d/jitsi.list"
  exep "wget -qO -  https://download.jitsi.org/jitsi-key.gpg.key | sudo apt-key add -"
}

step_4_info() { echo "Upgrade system packages"; }
step_4() {
  exe apt update && apt upgrade
}

step_5_info() { echo "Install nginx webserver"; }
step_5_alias() { echo "webserver"; }
step_5() {
  exe apt install nginx
  endReturn "Installation of webserver nginx failed"
  exe mkdir -p /etc/nginx/sites-available
  exe mkdir -p /etc/nginx/sites-enabled
  exe mkdir -p /etc/nginx/modules-enabled
  exe systemctl enable nginx.service
}

step_6_info() { echo "Install ufw firewall"; }
step_6_alias() { echo "firewall"; }
step_6() {
  exe apt install ufw
  endReturn "Installation of firewall ufw failed"
}

step_7_info() { echo "Setup ufw firewall to run $toolName"; }
step_7() {
  info "Configure ufw firewall"
  exe ufw allow 22/tcp
  exe ufw allow 80/tcp
  exe ufw allow 443/tcp
  exe ufw allow 4443/tcp
  exe ufw allow 10000/udp
  exe ufw logging medium && ufw default deny incoming && ufw enable && service ufw restart
}

step_8_info() { echo "Install $toolName"; }
step_8_alias() { echo "install"; }
step_8() {
  exe read -p "Make sure SSL certificates are available. Enter to continue"
  exe apt install jitsi-meet -y
}

step_9_info() { echo "Move automatically generated $toolName virutal host to new configuration directory"; }
step_9() {
  exe mv /etc/nginx/sites-available/*.conf /etc/nginx/conf.d
  exe mv /etc/nginx/conf.d/default.conf /etc/nginx/sites-available
  exe service nginx restart
  info "Check /etc/nginx/conf.d for unwanted configurations"
}

step_10_info() { echo "WIP post-install tasks"; }
step_10() {
  color green
  cat << WIP_END
# Tasks to be automated

 *  Make jitsi installation password protected
    (https://github.com/jitsi/jicofo#secure-domain)
    Creating new rooms will require username and password

 ** /etc/prosody/conf.avail/[your-hostname].cfg.lua

    a) Enable authentication on your main domain:

       VirtualHost "jitsi-meet.example.com"
           authentication = "internal_plain"

    b) Add new virtual host with anonymous login method for guests:

       VirtualHost "guest.jitsi-meet.example.com"
           authentication = "anonymous"
           c2s_require_encryption = false

 ** /etc/jitsi/meet/[your-hostname]-config.js

       var config = {
           hosts: {
                   domain: 'jitsi-meet.example.com',
                   anonymousdomain: 'guest.jitsi-meet.example.com',
                   ...
                  },
                  ...
       }

 ** /etc/jitsi/jicofo/sip-communicator.properties
    add new line:

       org.jitsi.jicofo.auth.URL=XMPP:jitsi-meet.example.com

 ** Create prosody user(s):

       prosodyctl register <username> jitsi-meet.example.com <password>

WIP_END
  color none
  info "Use step \"restart\" after these changes"
}

step_20_info() { echo "Restart all $toolName components"; }
step_20_alias() { echo "restart"; }
step_20() {
  info "Restart jitsi-meet components"
  exep "service prosody restart&& service jicofo restart && service jitsi-videobridge2 restart"
}

readonly sqr_minVersion=16
. /usr/local/bin/sequencer.sh