#!/bin/bash

# VPN Panel Auto-Installer
# Supports: WireGuard, 3x-ui, Remnawave

set -e

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m'

print_msg() {
    echo -e "${GREEN}[INFO]${NC} $1"
}

print_error() {
    echo -e "${RED}[ERROR]${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}[WARNING]${NC} $1"
}

check_root() {
    if [[ $EUID -ne 0 ]]; then
        print_error "Этот скрипт должен быть запущен с правами root"
        exit 1
    fi
}

detect_os() {
    if [ -f /etc/os-release ]; then
        . /etc/os-release
        OS=$ID
        VER=$VERSION_ID
    else
        print_error "Не удалось определить операционную систему"
        exit 1
    fi

    print_msg "Обнаружена ОС: $OS $VER"
}

update_system() {
    print_msg "Обновление системы..."

    case $OS in
        ubuntu|debian)
            apt-get update -y
            apt-get upgrade -y
            apt-get install -y curl wget git sudo ufw
            ;;
        centos|rhel|fedora)
            yum update -y
            yum install -y curl wget git sudo firewalld
            ;;
        *)
            print_error "Неподдерживаемая ОС: $OS"
            exit 1
            ;;
    esac
}

install_docker() {
    if command -v docker &> /dev/null; then
        print_msg "Docker уже установлен"
        return
    fi

    print_msg "Установка Docker..."
    curl -fsSL https://get.docker.com -o get-docker.sh
    sh get-docker.sh
    systemctl enable docker
    systemctl start docker
    rm get-docker.sh

    if ! command -v docker-compose &> /dev/null; then
        print_msg "Установка Docker Compose..."
        curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
        chmod +x /usr/local/bin/docker-compose
    fi
}

install_wireguard() {
    print_msg "Установка WireGuard..."

    case $OS in
        ubuntu|debian)
            apt-get install -y wireguard wireguard-tools qrencode
            ;;
        centos|rhel|fedora)
            yum install -y epel-release
            yum install -y wireguard-tools qrencode
            ;;
    esac

    mkdir -p /etc/wireguard
    cd /etc/wireguard

    if [ ! -f server_private.key ]; then
        wg genkey | tee server_private.key | wg pubkey > server_public.key
        chmod 600 server_private.key
    fi

    read -p "Введите порт WireGuard (по умолчанию 51820): " WG_PORT
    WG_PORT=${WG_PORT:-51820}

    SERVER_PRIVATE_KEY=$(cat server_private.key)
    SERVER_IP=$(curl -s ifconfig.me)

    cat > /etc/wireguard/wg0.conf <<EOF
[Interface]
Address = 10.0.0.1/24
ListenPort = $WG_PORT
PrivateKey = $SERVER_PRIVATE_KEY
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
EOF

    echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
    sysctl -p

    systemctl enable wg-quick@wg0
    systemctl start wg-quick@wg0

    ufw allow $WG_PORT/udp 2>/dev/null || firewall-cmd --permanent --add-port=$WG_PORT/udp 2>/dev/null

    print_msg "WireGuard установлен на порту $WG_PORT"
    print_msg "Конфигурация: /etc/wireguard/wg0.conf"
}

install_3xui() {
    print_msg "Установка 3x-ui..."

    bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

    print_msg "3x-ui установлен"
    print_msg "Панель доступна по адресу: http://$(curl -s ifconfig.me):2053"
    print_msg "Логин по умолчанию: admin"
    print_msg "Пароль по умолчанию: admin"
}

install_remnawave() {
    print_msg "Установка Remnawave..."

    install_docker

    mkdir -p /opt/remnawave
    cd /opt/remnawave

    read -p "Введите домен для Remnawave (например, vpn.example.com): " DOMAIN
    read -p "Введите email для SSL сертификата: " EMAIL
    read -p "Введите порт панели (по умолчанию 8080): " PANEL_PORT
    PANEL_PORT=${PANEL_PORT:-8080}

    cat > docker-compose.yml <<EOF
version: '3.8'

services:
  remnawave:
    image: remnawave/remnawave:latest
    container_name: remnawave
    restart: unless-stopped
    ports:
      - "$PANEL_PORT:8080"
    volumes:
      - ./data:/app/data
      - ./config:/app/config
    environment:
      - DOMAIN=$DOMAIN
      - PANEL_PORT=$PANEL_PORT
    networks:
      - remnawave-network

  nginx:
    image: nginx:alpine
    container_name: remnawave-nginx
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./ssl:/etc/nginx/ssl
    depends_on:
      - remnawave
    networks:
      - remnawave-network

networks:
  remnawave-network:
    driver: bridge
EOF

    cat > nginx.conf <<EOF
events {
    worker_connections 1024;
}

http {
    upstream remnawave {
        server remnawave:8080;
    }

    server {
        listen 80;
        server_name $DOMAIN;
        return 301 https://\$server_name\$request_uri;
    }

    server {
        listen 443 ssl http2;
        server_name $DOMAIN;

        ssl_certificate /etc/nginx/ssl/cert.pem;
        ssl_certificate_key /etc/nginx/ssl/key.pem;

        location / {
            proxy_pass http://remnawave;
            proxy_set_header Host \$host;
            proxy_set_header X-Real-IP \$remote_addr;
            proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto \$scheme;
        }
    }
}
EOF

    mkdir -p ssl

    if [ ! -z "$DOMAIN" ] && [ ! -z "$EMAIL" ]; then
        print_msg "Получение SSL сертификата..."
        docker run --rm -v "$(pwd)/ssl:/etc/letsencrypt" certbot/certbot certonly --standalone -d $DOMAIN --email $EMAIL --agree-tos --non-interactive || print_warning "Не удалось получить SSL сертификат автоматически"
    fi

    docker-compose up -d

    print_msg "Remnawave установлен"
    print_msg "Панель доступна по адресу: https://$DOMAIN"
}

show_menu() {
    clear
    echo -e "${BLUE}╔════════════════════════════════════════╗${NC}"
    echo -e "${BLUE}║   VPN Panel Auto-Installer v1.0       ║${NC}"
    echo -e "${BLUE}╚════════════════════════════════════════╝${NC}"
    echo ""
    echo "Выберите панель для установки:"
    echo ""
    echo "1) WireGuard"
    echo "2) 3x-ui"
    echo "3) Remnawave"
    echo "4) Установить все"
    echo "5) Выход"
    echo ""
    read -p "Ваш выбор [1-5]: " choice
}

main() {
    check_root
    detect_os

    show_menu

    case $choice in
        1)
            update_system
            install_wireguard
            ;;
        2)
            update_system
            install_3xui
            ;;
        3)
            update_system
            install_remnawave
            ;;
        4)
            update_system
            install_wireguard
            install_3xui
            install_remnawave
            ;;
        5)
            print_msg "Выход..."
            exit 0
            ;;
        *)
            print_error "Неверный выбор"
            exit 1
            ;;
    esac

    print_msg "Установка завершена!"
}

main