#!/bin/sh

GENERATE_CERTIFICATE=$GENERATE_CERTIFICATE

cd /proxy_config

DOMAIN=$1
if [ -n "$2" ]; then
	echo "$DOMAIN DELETED";
	rm $DOMAIN.conf;
	exit;
fi

DOMAIN_SOURCE=/domains/$DOMAIN
DOMAIN_NAME=$(jq -r .DOMAIN $DOMAIN_SOURCE)
HTTP_PORT=$(jq -r .HTTP_PORT $DOMAIN_SOURCE)
HTTPS_PORT=$(jq -r .HTTPS_PORT $DOMAIN_SOURCE)
LOCAL_IP=$(jq -r .LOCAL_IP $DOMAIN_SOURCE)
ALIASES_HTTP=$(jq -r '.ALIASES_HTTP | select(.!="null") | join(" ")' $DOMAIN_SOURCE)
ALIASES_HTTPS=$(jq -r '.ALIASES_HTTPS | select(.!="null") | join(" ")' $DOMAIN_SOURCE)
REDIRECT_HTTP=$(jq -r .REDIRECT_HTTP $DOMAIN_SOURCE)
REDIRECT_HTTPS=$(jq -r .REDIRECT_HTTPS $DOMAIN_SOURCE)
ERROR_PAGE=$(jq -r .ERROR_PAGE $DOMAIN_SOURCE)
MAX_BODY_SIZE=$(jq -r .MAX_BODY_SIZE $DOMAIN_SOURCE)
DEBUG=$(jq -r .DEBUG $DOMAIN_SOURCE)
ALLOWED_NETWORK=$(jq -r '.ALLOWED_NETWORK | select(.!="null") | join(" ")' $DOMAIN_SOURCE)
ALTERNATE_LOCATION_PATH=$(jq -r .ALTERNATE_LOCATION_PATH $DOMAIN_SOURCE)
# check whether certificates exist or not

if [ "$HTTPS_PORT" != "" ]; then
	/scripts/check_certificates.sh "$DOMAIN";
fi

echo "created domain name: "$DOMAIN;

file="/tmp/$DOMAIN.conf"

#cp -a /scripts/nginx_template.conf /tmp/$DOMAIN.conf

{

if [[ "$HTTP_PORT" != "80" ]]; then
	echo "server {
listen 80 proxy_protocol;"
	if [[ "$ALIASES_HTTP" != "" ]]; then
		echo "server_name $DOMAIN_NAME $ALIASES_HTTP;"
	else
		echo "server_name $DOMAIN_NAME;"
	fi 
echo "set_real_ip_from 0.0.0.0/0;
real_ip_header proxy_protocol;
rewrite_log on;
return 301 https://$DOMAIN_NAME;
}"

fi	

if [[ "$HTTP_PORT" != "" && "$HTTP_PORT" != "80" ]]; then
	echo "server {
	listen $HTTP_PORT proxy_protocol;
	set_real_ip_from 0.0.0.0/0;
	real_ip_header proxy_protocol;"
	
		if [[ "$ALIASES_HTTP" != "" ]]; then
			echo "server_name $DOMAIN_NAME $ALIASES_HTTP;"
		else
			echo "server_name $DOMAIN_NAME;"
		fi 
		
		if [[ "$MAX_BODY_SIZE" != "" ]]; then
		echo "client_max_body_size "$MAX_BODY_SIZE";"
		
		else
		
		echo "client_max_body_size 0;"
		fi 
	
	echo "rewrite_log on;"
	
	
		if [[ "$REDIRECT_HTTP" != "" ]] ; then 
			echo "return 301 $REDIRECT_HTTP;"
		elif [[  "$HTTP_PORT" == "" ]]; then
			echo "return 301 https://"$DOMAIN_NAME;
	
		else
			echo "location / {"
			
			if [[ "$ALLOWED_NETWORK" != "" ]]; then
				ALLOWED_NETWORK_IDX=$(jq -r '.ALLOWED_NETWORK | length' $DOMAIN_SOURCE)
				ALLOWED_NETWORK_IDX=$(( $ALLOWED_NETWORK_IDX - 1 ))
				
				for i in $(seq 0 $ALLOWED_NETWORK_IDX) ; do
						AN=$(jq -r .ALLOWED_NETWORK[$i] $DOMAIN_SOURCE)
						echo "     allow "$AN";"
				done
				echo "     deny  all;"
		 	fi	
	
			if [[ "$HTTP_PORT" != "" ]]; then
	 			echo " proxy_pass http://$LOCAL_IP:$HTTP_PORT;"
			fi
	
			echo " proxy_set_header Host "'$http_host'";
	 proxy_set_header X-Real-IP "'$remote_addr'";
	 proxy_set_header X-Forwarded-For "'$proxy_add_x_forwarded_for'";
	 proxy_set_header X-Forwarded-Proto "'$scheme'";
	 proxy_set_header Upgrade "'$http_upgrade;'"
	 proxy_cookie_path / /;
	 proxy_set_header Connection "'$http_connection'" ;"
	
			if [[ "$DEBUG" != "true" ]]; then
			 	echo " access_log off;"
			fi
			echo " proxy_redirect off;"
			echo " proxy_buffering off;"
			echo "}"
				
			if [[ "$ERROR_PAGE" != "" && "$HTTP_PORT" != "" ]]; then
				echo "error_page 404 /$ERROR_PAGE;
				location = /$ERROR_PAGE {
				      root    html;
				      allow   all;
				      index   404.html;
				      rewrite ^ "'$scheme'" http://$ERROR_PAGE"'$request_uri'" permanent;
					      }"
			fi
		fi
	echo "}"
fi

if [[ "$HTTPS_PORT" != "" ]]; then
	echo "server {
listen 443 ssl proxy_protocol;
set_real_ip_from 0.0.0.0/0;
real_ip_header proxy_protocol;"

if [[ "$ALIASES_HTTPS" != "" ]]; then
	echo "server_name $DOMAIN_NAME $ALIASES_HTTPS;"
else
	echo "server_name $DOMAIN_NAME;"
fi 

if [[ "$MAX_BODY_SIZE" != "" ]]; then
	echo "client_max_body_size "$MAX_BODY_SIZE";"
else
	echo "client_max_body_size 0;"
fi 

echo "rewrite_log on;
proxy_ssl_server_name on; 
 ssl_dhparam /etc/ssl/keys/$DOMAIN/dhparam.pem;"

if [ "$GENERATE_CERTIFICATE" == "true" ]; then 

echo "ssl_certificate /etc/ssl/keys/$DOMAIN/fullchain.pem;
 ssl_certificate_key /etc/ssl/keys/$DOMAIN/key.pem;"

else 

echo "ssl_certificate /etc/ssl/keys/fullchain.pem;
 ssl_certificate_key /etc/ssl/keys/key.pem;"

fi

echo "ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 ssl_prefer_server_ciphers on;
 ssl_ciphers "'"EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !kDHE"'";
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 5m;
ssl_stapling on;"


	if [[ "$ERROR_PAGE" != "" && "$HTTPS_PORT" != "" ]]; then
		echo "error_page 404 /$ERROR_PAGE;
location = /$ERROR_PAGE {
      root    html;
      allow   all;
      index   404.html;
      rewrite ^ "'$scheme'":http://$ERROR_PAGE"'$request_uri'" permanent;
	      }"
	fi

	if [[ "$REDIRECT_HTTPS" != ""  ]]; then
		echo "return 301 $REDIRECT_HTTPS;"
	else 
		echo "location / {"

		if [[ "$ALLOWED_NETWORK" != "" ]]; then
			ALLOWED_NETWORK_IDX=$(jq -r '.ALLOWED_NETWORK | length' $DOMAIN_SOURCE)
			ALLOWED_NETWORK_IDX=$(( $ALLOWED_NETWORK_IDX - 1 ))
			
			for i in $(seq 0 $ALLOWED_NETWORK_IDX) ; do
					AN=$(jq -r .ALLOWED_NETWORK[$i] $DOMAIN_SOURCE)
					echo "     allow "$AN";"
			done
			echo "     deny  all;"
	 	fi	
echo " proxy_pass http://$LOCAL_IP:$HTTPS_PORT;"
 
		echo " proxy_set_header Host "'$http_host'";
 proxy_set_header X-Real-IP "'$remote_addr'";
 proxy_set_header X-Forwarded-For "'$proxy_add_x_forwarded_for'";
 proxy_set_header X-Forwarded-Proto "'$scheme'";
 proxy_set_header Upgrade "'$http_upgrade;'"
 proxy_cookie_path / /;
 proxy_set_header Connection "'$http_connection'";
 proxy_connect_timeout      300;
 proxy_send_timeout         300;
 proxy_read_timeout         300;
 proxy_next_upstream off;"

		if [[ "$DEBUG" != "true" ]]; then
		 	echo " access_log off;"
		fi
		echo " proxy_redirect off;"
		echo " proxy_buffering off;"
		echo "}"

		if [[ "$ALTERNATE_LOCATION_PATH" != "" ]]; then

			ALP_IDX=$(jq -r '.ALTERNATE_LOCATION_PATH | length' $DOMAIN_SOURCE)
			ALP_IDX=$(( $ALP_IDX - 1 ))

			for i in $(seq 0 $ALP_IDX) ;
			do
				ALP=$(jq -r .ALTERNATE_LOCATION_PATH[$i] $DOMAIN_SOURCE)

				ALP_LOCAL_PATH=$(echo $ALP | jq -rc .LOCAL_PATH);
				ALP_LOCAL_IP=$(echo $ALP | jq -rc .LOCAL_IP);
				ALP_LOCAL_PORT=$(echo $ALP | jq -rc .LOCAL_PORT);
				ALP_LOCAL_ALLOWED_NETWORK=$(echo $ALP | jq -rc '.LOCAL_ALLOWED_NETWORK | select(.!="null") | join(" ")');

				if [[ "$ALP_LOCAL_IP" = "" ]]; then
					ALP_LOCAL_IP=$LOCAL_IP
				fi;

				if [[ "$ALP_LOCAL_PORT" = "" ]]; then
					ALP_LOCAL_PORT=$HTTP_PORT
				fi;

				echo "location $ALP_LOCAL_PATH {"

				if [[ "$ALP_LOCAL_ALLOWED_NETWORK" != "" ]]; then

				for i in $(echo $ALP_LOCAL_ALLOWED_NETWORK) ; do
						echo "     allow "$i";"
				done
						echo "     deny  all;"
				fi

				if [[ "$ALP_LOCAL_PORT" != "" ]]; then
					echo " proxy_pass http://$ALP_LOCAL_IP:$ALP_LOCAL_PORT;"
				else
					echo " proxy_pass http://$ALP_LOCAL_IP:80;"
				fi
 
				echo " proxy_set_header Host "'$http_host'";
 proxy_set_header X-Real-IP "'$remote_addr'";
 proxy_set_header X-Forwarded-For "'$proxy_add_x_forwarded_for'";
 proxy_set_header X-Forwarded-Proto "'$scheme'";
 proxy_set_header Upgrade "'$http_upgrade;'"
 proxy_cookie_path $ALP_LOCAL_PATH $ALP_LOCAL_PATH;
 proxy_set_header Connection "'$http_connection'";
 proxy_connect_timeout      300;
 proxy_send_timeout         300;
 proxy_read_timeout         300;
 proxy_next_upstream off;"

				if [[ "$DEBUG" != "true" ]]; then
					echo " access_log off;"
				fi
				echo " proxy_redirect off;"
				echo " proxy_buffering off;"
				echo "}"
			done;
		fi;

	fi

echo "}"

fi

} >> "$file"

mv /tmp/$DOMAIN.conf $DOMAIN.conf;
echo "$DOMAIN" >> new_config