#!/bin/bash

exname=$(basename $0)

compose_core=$(which compose-core) || {
    echo "Requires compose-core executable to be in \$PATH." >&2
    exit 1
}

fetch-def() {
    local path="$1" fname="$2"
    ( . "$path" 1>&2 || {
          echo "Failed to load '$path'." >&2
          exit 1
      }
      declare -f "$fname"
    )
}


prefix_cmd="
. /etc/shlib

include common
include parse

. ../lib/common

$(fetch-def "$compose_core" yaml_get_values)
$(fetch-def "$compose_core" yaml_get_interpret)

" || {
    echo "Couldn't build prefix cmd" >&2
    exit 1
}




# mock
relation-get() {
    local key="$1"
    echo "$CFG" | shyaml get-value "$key" 2>/dev/null
}
export -f relation-get

cfg-get-value() {
    local key="$1"
    shyaml get-value "$key" 2>/dev/null
}
export -f cfg-get-value

get_service_relations() {
    printf "%s\0" "${RELATIONS[@]}"
}
export -f get_service_relations

export state_tmpdir=$(mktemp -d -t tmp.XXXXXXXXXX)
trap "rm -rf \"$state_tmpdir\"" EXIT

##
## Tests
##

try "
apache_vhost_statement publish_dir ,http, '\
' www.example.com"
noerror
is out '<VirtualHost *:80>

    ServerAdmin contact@www.example.com
    ServerName www.example.com

    ServerSignature Off
    CustomLog /var/log/apache2/www.example.com_access.log combined
    ErrorLog /var/log/apache2/www.example.com_error.log
    ErrorLog syslog:local2


    ##
    ## Publish directory /var/www/www.example.com
    ##

    DocumentRoot /var/www/www.example.com

    <Directory />
        Options FollowSymLinks
        AllowOverride None
    </Directory>

    <Directory /var/www/www.example.com>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride all
        Allow from all
    </Directory>

    ## Forbid any cache, this is only usefull on dev server.
    #Header set Cache-Control "no-cache"
    #Header set Access-Control-Allow-Origin "*"
    #Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    #Header set Access-Control-Allow-Headers "origin, content-type, accept"

</VirtualHost>' RTRIM

##
## Aliases
##

try "
apache_vhost_statement publish_dir ,http, '' 'www.example.com toto'"
noerror
is out reg 'ServerAlias toto'


try "
apache_vhost_statement publish_dir ,http, '' 'www.example.com toto titi'"
noerror
is out reg 'ServerAlias toto'
is out reg 'ServerAlias titi'


##
## Creds
##

try "
apache_vhost_statement publish_dir ,http, ''  www.example.com
" "credentials allow all"
noerror
is out reg 'Allow from all'


try "
apache_vhost_statement publish_dir ,http, '
creds:
  toto: xxx
  titi: yyy
' www.example.com
" "credentials with basic auth user/pass"
noerror
is out reg 'AuthType basic'
is out reg 'Require valid-user'


##
## proxy
##

try "
apache_vhost_statement web_proxy ,http, '
target: popo:3333
creds:
  toto: titi
' www.example.com
" "proxy explicit target"
noerror
is out reg 'ProxyPass / http://popo:3333/'
is out part '
        <Location / >
            AuthType basic
            AuthName "private"
            AuthUserFile /etc/apache2/sites-enabled/www.example.com.passwd
            Require valid-user
            ProxyPassReverse http://popo:3333/
        </Location>
'


try "
apache_vhost_statement web_proxy ,http, '
target: popo:3333
apache-proxy-pass-options: nocanon
' www.example.com
" "proxy proxy-pass options"
noerror
is out reg 'ProxyPass / http://popo:3333/ nocanon'

##
## ssl
##

try "
apache_vhost_statement web_proxy ,https, '
ssl: true
target: popo:3333
' www.example.com
" "ssl default generation (ssl-cert-snakeoil)"
noerror
is out reg 'VirtualHost \*:443'
is out reg '<IfModule mod_ssl.c>'
is out reg 'SSLEngine On'
is out reg 'SSLProxyEngine On'
is out reg 'ssl-cert-snakeoil'
is out reg 'CustomLog /var/log/apache2/s-www.example.com_access.log combined'


try "
RELATIONS=()
apache_vhost_statement web_proxy ,https, '
ssl:
  ca-cert: a
  key: b
  cert: c
target: popo:3333
' www.example.com
" "ssl providing keys inline"
noerror
is out reg 'SSLCertificateFile /etc/ssl/certs/www.example.com.pem'
is out reg 'SSLCertificateKeyFile /etc/ssl/private/www.example.com.key'
is out reg 'SSLCACertificateFile /etc/ssl/certs/www.example.com-ca.pem'


##
## CustomRules
##

try "
apache_vhost_statement web_proxy ,https, '
ssl:
  ca-cert: a
  key: b
  cert: c
apache-custom-rules: |
  RewriteEngine On
  RewriteCond %{QUERY_STRING} !skin=formanoo
  RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
target: popo:3333
' www.example.com
" "custom rules"
noerror
is out reg 'RewriteEngine On'


##
## double def
##

try "
apache_vhost_statement web_proxy ,https,http, '
ssl:
  ca-cert: a
  key: b
  cert: c
apache-custom-rules: |
  RewriteEngine On
  RewriteCond %{QUERY_STRING} !skin=formanoo
  RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
target: popo:3333
' www.example.com
" "both http and https"
noerror
is out '<VirtualHost *:80>

    ServerAdmin contact@www.example.com
    ServerName www.example.com

    ServerSignature Off
    CustomLog /var/log/apache2/www.example.com_access.log combined
    ErrorLog /var/log/apache2/www.example.com_error.log
    ErrorLog syslog:local2


    ##
    ## Custom rules
    ##

    RewriteEngine On
    RewriteCond %{QUERY_STRING} !skin=formanoo
    RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]


    ##
    ## Proxy declaration towards popo:3333
    ##

    <IfModule mod_proxy.c>
        ProxyRequests Off
        <Proxy *>
            Order deny,allow
            Allow from all
        </Proxy>
        ProxyVia On
        ProxyPass / http://popo:3333/ retry=0
        <Location / >
            Allow from all
            ProxyPassReverse http://popo:3333/
        </Location>

    </IfModule>

    SetEnvIf X-Forwarded-Proto "^$" forwarded_proto_not_set=true
    RequestHeader set "X-Forwarded-Proto" "http" env=forwarded_proto_not_set

    ## Fix IE problem (httpapache proxy dav error 408/409)
    SetEnv proxy-nokeepalive 1

    ## Forbid any cache, this is only usefull on dev server.
    #Header set Cache-Control "no-cache"
    #Header set Access-Control-Allow-Origin "*"
    #Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    #Header set Access-Control-Allow-Headers "origin, content-type, accept"

</VirtualHost>

<IfModule mod_ssl.c>
  <VirtualHost *:443>

      ServerAdmin contact@www.example.com
      ServerName www.example.com

      ServerSignature Off
      CustomLog /var/log/apache2/s-www.example.com_access.log combined
      ErrorLog /var/log/apache2/s-www.example.com_error.log
      ErrorLog syslog:local2


      ##
      ## Custom rules
      ##

      RewriteEngine On
      RewriteCond %{QUERY_STRING} !skin=formanoo
      RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]


      ##
      ## Proxy declaration towards popo:3333
      ##

      <IfModule mod_proxy.c>
          ProxyRequests Off
          <Proxy *>
              Order deny,allow
              Allow from all
          </Proxy>
          ProxyVia On
          ProxyPass / http://popo:3333/ retry=0
          <Location / >
              Allow from all
              ProxyPassReverse http://popo:3333/
          </Location>
          SSLProxyEngine On
      </IfModule>

      SetEnvIf X-Forwarded-Proto "^$" forwarded_proto_not_set=true
      RequestHeader set "X-Forwarded-Proto" "https" env=forwarded_proto_not_set

      ## Fix IE problem (httpapache proxy dav error 408/409)
      SetEnv proxy-nokeepalive 1

      ## Forbid any cache, this is only usefull on dev server.
      #Header set Cache-Control "no-cache"
      #Header set Access-Control-Allow-Origin "*"
      #Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
      #Header set Access-Control-Allow-Headers "origin, content-type, accept"

      ##
      ## SSL Configuration
      ##

      SSLEngine On

      SSLCertificateFile /etc/ssl/certs/www.example.com.pem
      SSLCertificateKeyFile /etc/ssl/private/www.example.com.key
      SSLCACertificateFile /etc/ssl/certs/www.example.com-ca.pem

      SSLVerifyClient None

  </VirtualHost>
</IfModule>' RTRIM




##
## single def no domain
##

try "
apache_vhost_statement publish_dir ,http, '
apache-custom-rules: |
  RewriteEngine On
  RewriteCond %{QUERY_STRING} !skin=formanoo
  RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
target: popo:3333
' ""
" "http without domain"
noerror
is out '<VirtualHost *:80>

    ServerAdmin webmaster@localhost

    ServerSignature Off
    CustomLog /var/log/apache2/access.log combined
    ErrorLog /var/log/apache2/error.log
    ErrorLog syslog:local2


    ##
    ## Custom rules
    ##

    RewriteEngine On
    RewriteCond %{QUERY_STRING} !skin=formanoo
    RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]


    ##
    ## Publish directory /var/www/html
    ##

    DocumentRoot /var/www/html

    <Directory />
        Options FollowSymLinks
        AllowOverride None
    </Directory>

    <Directory /var/www/html>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride all
        Allow from all
    </Directory>

    ## Forbid any cache, this is only usefull on dev server.
    #Header set Cache-Control "no-cache"
    #Header set Access-Control-Allow-Origin "*"
    #Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    #Header set Access-Control-Allow-Headers "origin, content-type, accept"

</VirtualHost>' RTRIM


try "
apache_vhost_statement ssh_tunnel ,https, '
ssl: true
apache-custom-rules: |
  RewriteEngine On
  RewriteCond %{QUERY_STRING} !skin=formanoo
  RewriteRule ^(/web/webclient/home.*)$ $1?skin=formanoo [L,QSA,R=302]
target: popo:3333
' 'ssh.example.com'
" "ssh tunnel"
noerror
is out '
<IfModule mod_ssl.c>
  <VirtualHost *:443>

      ServerAdmin contact@ssh.example.com
      ServerName ssh.example.com

      ServerSignature Off
      CustomLog /var/log/apache2/s-ssh.example.com_access.log combined
      ErrorLog /var/log/apache2/s-ssh.example.com_error.log
      ErrorLog syslog:local2


      ##
      ## Custom rules
      ##

      RewriteEngine On
      RewriteCond %{QUERY_STRING} !skin=formanoo
      RewriteRule ^(/web/webclient/home.*)$ ?skin=formanoo [L,QSA,R=302]


      ##
      ## SSH Tunnel
      ##

      #HostnameLookups On
      ProxyRequests On
      AllowConnect 22
      #ProxyVia on

      ### Deny everything by default

      <Proxy *>
          Order deny,allow
          Deny from all
      </proxy>

      ### Accept redirect only to same domain

      <Proxy ssh.example.com>
          Order deny,allow
          Allow from all
      </Proxy>

      ## Forbid any cache, this is only usefull on dev server.
      #Header set Cache-Control "no-cache"
      #Header set Access-Control-Allow-Origin "*"
      #Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
      #Header set Access-Control-Allow-Headers "origin, content-type, accept"

      ##
      ## SSL Configuration
      ##

      SSLEngine On

      SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
      SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key


      SSLVerifyClient None

  </VirtualHost>
</IfModule>' RTRIM