#!/usr/bin/env bash
source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
# Copyright (c) 2021-2026 community-scripts ORG
# Author: Joerg Heinemann (heinemannj)
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
# Source: https://github.com/smallstep/certificates

APP="step-ca"
var_tags="${var_tags:-certificate-authority;pki;acme-server}"
var_cpu="${var_cpu:-1}"
var_ram="${var_ram:-512}"
var_disk="${var_disk:-2}"
var_os="${var_os:-debian}"
var_version="${var_version:-13}"
var_arm64="${var_arm64:-yes}"
var_unprivileged="${var_unprivileged:-1}"

header_info "$APP"
variables
color
catch_errors

function update_script() {
  header_info
  check_container_storage
  check_container_resources
  if [[ ! -f /etc/apt/sources.list.d/smallstep.sources ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
  msg_info "Updating step-ca and step-cli"
  $STD apt update
  $STD apt upgrade -y step-ca step-cli

  # Patch for making $STD happy (/usr/bin/step is a symlink to /usr/bin/step-cli)
  STEPBIN="$(which step)"
  rm -f "$STEPBIN"
  cp -f "$(which step-cli)" "$STEPBIN"

  # Patch for leaf_data.tpl - Issue: #14810
  sed -i \
  -e 's/\[//' \
  -e 's/\]//' \
  "$STEPPATH/templates/x509/leaf_data.tpl"

  # Patch for provisioners templateData - Issue: #14810
  step ca provisioner list | jq -c '.[] | select(.options.x509.templateData != null) | .name' > /tmp/provisioner_names.json
  for i in $(cat /tmp/provisioner_names.json); do
    prov=`echo $i | tr -d '"'`
    echo
    echo "Updating provisioner $prov ..."
    $STD step ca provisioner update $prov --x509-template-data=$STEPPATH/templates/x509/leaf_data.tpl
  done
  rm /tmp/provisioner_names.json

  $STD systemctl restart step-ca
  msg_ok "Updated step-ca and step-cli"

  if check_for_gh_release "step-badger" "lukasz-lobocki/step-badger"; then
    fetch_and_deploy_gh_release "step-badger" "lukasz-lobocki/step-badger" "prebuild" "latest" "/opt/step-badger" "step-badger_Linux_$(arch_resolve "x86_64" "arm64").tar.gz"
    msg_ok "Updated step-badger"
  fi
  exit
}

start
build_container
description

msg_ok "Completed successfully!\n"
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
echo -e "${INFO}${YW}Access it using the following URL:${CL}"
echo -e "${GATEWAY}${BGN}https://${IP}/provisioners${CL}"
