#!/bin/bash

set -e

if [ "$1" != "configure" ]; then
    exit 0
fi

if ! [ -f /usr/local/fastpanel2-nginx/ssl-certs/fastpanel2.crt ]; then
    openssl req -x509 -newkey rsa:2048 -days 365 -nodes -keyout /usr/local/fastpanel2-nginx/ssl-certs/fastpanel2.key -out /usr/local/fastpanel2-nginx/ssl-certs/fastpanel2.crt -extensions SAN -config <(cat /etc/ssl/openssl.cnf <(printf "\n[SAN]\nsubjectAltName=DNS:FASTPANEL\nextendedKeyUsage=serverAuth")) -subj /O=FASTPANEL/CN=FASTPANEL
fi

if [ -x "/etc/init.d/fastpanel2-nginx" ]; then
    if [ -f "/var/run/fastpanel2-nginx.pid" ] && kill -0 `cat /var/run/fastpanel2-nginx.pid` >/dev/null; then
        /etc/init.d/fastpanel2-nginx upgrade || echo \
            "Binary upgrade failed, please check nginx's error.log"
    else
        systemctl start fastpanel2-nginx.service || true
    fi
fi

if ! [ -d "/var/cache/fastpanel2-nginx" ]; then
    mkdir /var/cache/fastpanel2-nginx
fi

systemctl daemon-reload
systemctl enable fastpanel2-nginx

if systemctl -q is-active fastpanel2-nginx.service ; then
    systemctl reload fastpanel2-nginx.service
else
    systemctl start fastpanel2-nginx.service
fi

if systemctl -q is-active apache2.service ; then
    systemctl reload apache2.service
fi

exit 0