setup.sh

#!/bin/bash
# WP Server - Server Management - Setup
# This script will configure the sudoers file and create a wrapper script for a user to run the 'wp-server' command.

VERSION="1.5.0"

# script name
SCRIPT_NAME="wp-server"
# install directories
INSTALL_DIR="$(dirname "$(readlink -f "$0")")"
LOCAL_INSTALL_DIR=".local/bin"
# Configuration file
CONFIG_FILE="$INSTALL_DIR/api.conf"
# Get hostname
HOSTNAME=$(hostname -f)

DEFAULT_API_URL="https://api.spinupwp.app/v1"

# confirmation helper
function get_confirmation() {
    while true; do
        read -p "$(echo -e "\\nCONFIRM: ${1} Are you sure? [Yes/no]") " user_input
        case $user_input in
            [Yy]* ) break;;
            "" ) break;;
            [Nnc]* ) return 1;;
            * ) echo "Please respond yes [Y/y/{enter}] or no [n/c].";;
        esac
    done
    return 0
}

# Argument parsing
UNATTENDED=false
ADD_CRON=false
for arg in "$@"; do
    case "$arg" in
        --unattended)
            UNATTENDED=true
            echo "Running in unattended mode."
            ;;
        --add-cron)
            ADD_CRON=true
            ;;
    esac
done

#######################################################
#### Check api.conf
#######################################################

if [ "$UNATTENDED" = true ]; then
    if [[ ! -f "$CONFIG_FILE" ]]; then
        echo "ERROR: Configuration file not found: $CONFIG_FILE"
        exit 1
    fi

    if ! grep -q "^API_KEY=." "$CONFIG_FILE" || \
       ! grep -q "^API_URL=." "$CONFIG_FILE"; then
        echo "ERROR: In unattended mode, api.conf must exist and contain non-empty API_KEY and API_URL."
        exit 1
    fi
    echo "Configuration file is valid for unattended mode."
else # Interactive mode
    if [[ ! -f "$CONFIG_FILE" ]]; then
      echo "ERROR: Configuration file not found: $CONFIG_FILE"

      # Prompt user to create config file
      if ( get_confirmation "Create a new configuration file?" ); then
        echo "Creating new configuration file: $CONFIG_FILE"
        # prompt for API_KEY
        read -p "Enter API key: " API_KEY
        # Write to config file
        echo "API_KEY=$API_KEY" > "$CONFIG_FILE"
        echo "API_URL=$DEFAULT_API_URL" >> "$CONFIG_FILE"
        echo "'$CONFIG_FILE' file created with default API_URL."
      else
        echo "Cancelled"
        exit 1
      fi
    else
      echo "Configuration file found: $CONFIG_FILE"
      # Parse API config file to check for missing values
      API_URL_FROM_FILE=""
      while IFS='=' read -r key value; do
        case "$key" in
          API_KEY)
            API_KEY_FROM_FILE="$value"
            ;;
          API_URL)
            API_URL_FROM_FILE="$value"
            ;;
        esac
      done < "$CONFIG_FILE"

      # Prompt for missing API_KEY
      if [[ -z "$API_KEY_FROM_FILE" ]]; then
          read -p "Enter API key: " API_KEY
          if grep -q "^API_KEY=" "$CONFIG_FILE"; then
              sed -i "s|^API_KEY=.*|API_KEY=$API_KEY|" "$CONFIG_FILE"
          else
              echo "API_KEY=$API_KEY" >> "$CONFIG_FILE"
          fi
          echo "API_KEY updated in $CONFIG_FILE."
      fi

      # Ensure API_URL is set (will use default if missing)
      if [[ -z "$API_URL_FROM_FILE" ]]; then
          echo "API_URL not found in $CONFIG_FILE. Setting to default: $DEFAULT_API_URL"
          if grep -q "^API_URL=" "$CONFIG_FILE"; then
              sed -i "s|^API_URL=.*|API_URL=$DEFAULT_API_URL|" "$CONFIG_FILE"
          else
              echo "API_URL=$DEFAULT_API_URL" >> "$CONFIG_FILE"
          fi
          echo "API_URL updated in $CONFIG_FILE."
      fi

      if grep -q "^SERVER_ID=." "$CONFIG_FILE"; then
          echo "Server ID found in config file. Skipping manual edit."
      fi
    fi
fi

# Set API key & URL from the config file
API_KEY=""
API_URL=""
while IFS='=' read -r key value; do
  case "$key" in
    API_KEY)
      API_KEY="$value"
      ;;
    API_URL)
      API_URL="$value"
      ;;
  esac
done < "$CONFIG_FILE"

if [[ -z "$API_KEY" ]]; then
  echo "ERROR: Configuration file is missing API_KEY"
  exit 1
fi

# Set permissions
chmod 0600 "$CONFIG_FILE"
chmod 0700 "$INSTALL_DIR"/$SCRIPT_NAME.sh

#######################################################
#### SET SERVER_ID
#######################################################
if ! grep -q "^SERVER_ID=." "$CONFIG_FILE"; then
    # Get ALL servers from API
    SERVERS_JSON=$(curl -s -X GET "$API_URL/servers?limit=100" -H "Accept: application/json" -H "Authorization: Bearer $API_KEY")


    # Find server ID based on hostname
    SERVER_ID=$(echo "$SERVERS_JSON" | jq -r ".data[] | select(.name == \"$HOSTNAME\") | .id")
    echo "Server $HOSTNAME is server ID: $SERVER_ID"

    # Find and replace SERVER_ID in config file
    if grep -q "^SERVER_ID=" "$CONFIG_FILE"; then
      sed -i "s/^SERVER_ID=.*/SERVER_ID=$SERVER_ID/" "$CONFIG_FILE"
    else
      echo "SERVER_ID=$SERVER_ID" >> "$CONFIG_FILE"
    fi
    echo "Server ID $SERVER_ID written to $CONFIG_FILE"
fi

#######################################################
#### ATTENDED / UNATTENDED USER SETUP
#######################################################
if [ "$UNATTENDED" = true ]; then
    # Unattended setup for all site users
    SITES_USERS=$(getent passwd | grep "::/sites/")
    if [ -z "$SITES_USERS" ]; then
        echo "No site users found with home directories in /sites/. Exiting."
        exit 0
    fi

    echo "$SITES_USERS" | while IFS=: read -r user _ _ _ _ home _; do
        SELECTED_USER=$user
        USER_HOME_PATH=$home
        echo "-------------------------------------------------------"
        echo "Configuring user: $SELECTED_USER"

        # Configure sudoers
        SUDOERS_PATH="/etc/sudoers.d"
        SUDOERS_FILE="$SUDOERS_PATH/$SCRIPT_NAME-${SELECTED_USER}"

        if [ ! -f "$SUDOERS_FILE" ]; then
            echo "Creating sudoers file: $SUDOERS_FILE"
            SUDO_RULES="${SELECTED_USER} ALL=(root) NOPASSWD: $INSTALL_DIR/$SCRIPT_NAME.sh"
            echo -e "$SUDO_RULES" > "$SUDOERS_FILE"
            chmod 0440 "$SUDOERS_FILE"

            if visudo -c -f "$SUDOERS_FILE" > /dev/null 2>&1; then
                echo "Sudoers syntax is correct for ${SELECTED_USER}."
            else
                echo "ERROR: Sudoers syntax check failed for ${SELECTED_USER}. Rolling back..."
                rm -v "$SUDOERS_FILE"
            fi
        else
            echo "Sudoers file for ${SELECTED_USER} already exists. Skipping."
        fi

        # Create wrapper script
        WRAPPER_SCRIPT="$USER_HOME_PATH/$LOCAL_INSTALL_DIR/$SCRIPT_NAME"
        if [ ! -d "$(dirname "$WRAPPER_SCRIPT")" ]; then
            mkdir -p "$(dirname "$WRAPPER_SCRIPT")"
            chown "$SELECTED_USER":"$SELECTED_USER" "$(dirname "$WRAPPER_SCRIPT")"
        fi

        if [ ! -f "$WRAPPER_SCRIPT" ]; then
            printf '#!/bin/bash\n# WP Server - CLI Tool\n# This will not work without appropriate permissions configured with sudo.\n# Contact WP NET Support for help.\nsudo %s/%s.sh "$@"' "$INSTALL_DIR" "$SCRIPT_NAME" > "$WRAPPER_SCRIPT"
            chown "$SELECTED_USER":"$SELECTED_USER" "$WRAPPER_SCRIPT"
            chmod 0700 "$WRAPPER_SCRIPT"
            echo "Wrapper script created for '${SELECTED_USER}'."
        else
            echo "Wrapper script for ${SELECTED_USER} already exists. Skipping."
        fi
    done
    echo "-------------------------------------------------------"
    echo "Unattended setup complete."
else
    # Interactive setup for a single user
    # Get all users
    USER_LIST=$(getent passwd)
    # Filter users matching "::/sites/"
    SITES_USERS=$(echo "$USER_LIST" | grep "::/sites/")

    # Extract usernames and display numbered list
    echo "Available users with /sites directories:"
    echo "$SITES_USERS" | awk -F":" '{print NR ": " $1}'

    while true; do
      # Prompt user for selection
      read -p "Select a USER (c or x to cancel): " USER_NUM

      case "$USER_NUM" in
        c|x)
          echo "Cancelled."
          exit 1
          ;;
        [0-9]*)
          # Extract selected username
          SELECTED_USER=$(echo "$SITES_USERS" | awk -F":" "NR==$USER_NUM {print \$1}")
          # Check if a valid number was entered
          if [ -z "$SELECTED_USER" ]; then
            echo "Invalid user. Please try again."
          else
            break
          fi
          ;;
        *)
          echo "Invalid input. Please enter a number, c, or x."
          ;;
      esac
    done

    # Set user's home directory
    USER_HOME_PATH=$(getent passwd "$SELECTED_USER" | cut -d: -f6)
    echo "Selected user: '${SELECTED_USER}' home directory is: ${USER_HOME_PATH}"

    #######################################################
    #### Define the SUDOERS file
    #######################################################

    echo "Configuring sudoers file for user '${SELECTED_USER}'"
    SUDOERS_PATH="/etc/sudoers.d"
    SUDOERS_FILE="$SCRIPT_NAME-${SELECTED_USER}"
    SUDOERS_FILE="$SUDOERS_PATH/$SUDOERS_FILE"

    # only run if same sudoers config doesn't exist
    if [ ! -f "$SUDOERS_FILE" ]; then
        # Check if existing sudoers config is OK, before we mess with it
        echo "Checking sudo syntax with visudo ..."

        if visudo -c; then
            echo "Current sudoers syntax is correct."
        elif ( get_confirmation "CHMOD all files in $SUDOERS_PATH to 0440?" ); then
            chmod 0440 $SUDOERS_PATH/*
        fi
        # Define the sudo rules
        SUDO_RULES="${SELECTED_USER} ALL=(root) NOPASSWD: $INSTALL_DIR/$SCRIPT_NAME.sh"

        echo "Creating sudoers file at $SUDOERS_FILE"
        echo -e "$SUDO_RULES" > "$SUDOERS_FILE"
        chmod 0440 "$SUDOERS_FILE" # important!

        # Verify the syntax using visudo -c -f
        if visudo -c -f "$SUDOERS_FILE" > /dev/null 2>&1; then
            echo "Sudoers syntax is correct."
        else
            echo "ERROR: Sudoers syntax check failed. Rolling back ..."
            rm -v "$SUDOERS_FILE"
            echo -e "\nSudoers configuration failed!"
            exit 1 # error
        fi
        echo -e "\nSudoers configuration complete."
    else
        echo -e "\nSudoers file already exists."
        if ( get_confirmation "Display existing sudoers file?" ); then
            cat "$SUDOERS_FILE"
        fi
        if ( ! get_confirmation "Keep existing sudoers file?" ); then
            rm -v "$SUDOERS_FILE"
            echo "Checking sudo syntax with visudo ..."
            # if visudo -c > /dev/null 2>&1; then
            if visudo -c; then
                echo "Sudoers syntax is correct."
            else
                echo "ERROR: Sudoers syntax check failed! There may be a problem, check $SUDOERS_PATH/"
            fi
            echo -e "\nExiting ... you will need to re-run this script to create a new sudoers file."
            exit
        else
            echo "Continuing with existing sudoers config ..."
        fi
    fi

    #######################################################
    #### Create wrapper script
    #######################################################

    WRAPPER_SCRIPT="$USER_HOME_PATH/$LOCAL_INSTALL_DIR/$SCRIPT_NAME"
    printf '#!/bin/bash\n# WP Server - CLI Tool\n# This will not work without appropriate permissions configured with sudo.\n# Contact WP NET Support for help.\nsudo %s/%s.sh "$@"' "$INSTALL_DIR" "$SCRIPT_NAME" > "$WRAPPER_SCRIPT"
    sudo chown "$SELECTED_USER":"$SELECTED_USER" "$WRAPPER_SCRIPT"
    chmod 0700 "$WRAPPER_SCRIPT"

    echo "The user '${SELECTED_USER}' can now login and run: $SCRIPT_NAME <service>"

fi

# Add cron job if --add-cron was passed
if [ "$ADD_CRON" = true ]; then
    CRON_FILE="/etc/cron.d/$SCRIPT_NAME-cli"
    CRON_CMD="bash $INSTALL_DIR/setup.sh --unattended >/dev/null 2>&1"
    CRON_SCHEDULE="*/10 * * * * root $CRON_CMD"
    echo "Adding cron job to $CRON_FILE: $CRON_SCHEDULE"
    echo "$CRON_SCHEDULE" > "$CRON_FILE"
    chmod 0644 "$CRON_FILE"
    echo "Cron job added."
fi

exit 0