# Redmine

set -euo pipefail

REDMINE_VERSION="6.1.1"
RAILS_VERSION="7.2.3"
DB_NAME="redmine"
DB_USER="redmineuser"
DB_PASS=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1 || true`
DB_ROOTPW=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1 || true`


## install
for i in {1..5}; do
  DEBIAN_FRONTEND=noninteractive apt update -y \
  && DEBIAN_FRONTEND=noninteractive apt install -y \
    apache2 \
    apache2-bin \
    apache2-data \
    apache2-dev \
    apache2-utils \
    ruby-full \
    libapr1-dev \
    libaprutil1-dev \
    libcurl4-openssl-dev \
    mariadb-server \
    mariadb-server-core \
    mariadb-client \
    mariadb-client-core \
    mariadb-common \
    libmariadb3 \
    libmariadb-dev \
    git \
    curl \
    build-essential \
    libssl-dev \
    libreadline-dev \
    zlib1g-dev \
    nodejs \
    libffi-dev \
    libyaml-dev \
    unzip \
  && break
  [[ "$i" -eq 5 ]] && exit 1 || sleep 5
done

systemctl enable --now apache2
systemctl enable --now mariadb

for i in {1..10}; do
  systemctl is-active --quiet apache2.service \
  && systemctl is-active --quiet mariadb.service \
  && break
  sleep 3
done

## mysql
sudo mysql <<MYSQL
CREATE DATABASE IF NOT EXISTS ${DB_NAME};
CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';
GRANT ALL PRIVILEGES ON ${DB_NAME}.* TO '${DB_USER}'@'localhost';
ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOTPW}';
FLUSH PRIVILEGES;
MYSQL

## install rails

export HOME=/root
cd ~

gem install rails -v ${RAILS_VERSION}
gem install bundler

## Redmine

curl -fL \
  --retry 10 \
  --retry-delay 5 \
  --retry-connrefused \
  --retry-all-errors \
  -o "/tmp/redmine.zip" \
  "https://www.redmine.org/releases/redmine-${REDMINE_VERSION}.zip" \
  --fail

unzip /tmp/redmine.zip -d /var/www/html/
chown -R www-data:www-data /var/www/html
mv /var/www/html/redmine-${REDMINE_VERSION} /var/www/html/redmine
rm -f /var/www/html/index.html
rm -f /tmp/redmine.zip

cat > /var/www/html/redmine/config/database.yml <<EOF
# Default setup is given for MySQL 5.7.7 or later.
# Examples for PostgreSQL, SQLite3 and SQL Server can be found at the end.
# Line indentation must be 2 spaces (no tabs).

production:
  adapter: mysql2
  database: redmine
  host: localhost
  username: redmineuser
  password: 
  # Use "utf8" instead of "utfmb4" for MySQL prior to 5.7.7
  encoding: utf8mb4

    #development:
    # adapter: mysql2
    # database: redmine_development
    #  host: localhost
    #username: root
    #password:  ""
    # Use "utf8" instead of "utfmb4" for MySQL prior to 5.7.7
    #encoding: utf8mb4

# Warning: The database defined as "test" will be erased and
# re-generated from your development database when you run "rake".
# Do not set this db to the same as development or production.
#test:
#  adapter: mysql2
#  database: redmine_test
#  host: localhost
#  username: root
#  password:  ""
#  Use "utf8" instead of "utfmb4" for MySQL prior to 5.7.7
#  encoding: utf8mb4

# PostgreSQL configuration example
#production:
#  adapter: postgresql
#  database: redmine
#  host: localhost
#  username: postgres
#  password:  "postgres"

# SQLite3 configuration example
#production:
#  adapter: sqlite3
#  database: db/redmine.sqlite3

# SQL Server configuration example
#production:
#  adapter: sqlserver
#  database: redmine
#  host: localhost
#  username: jenkins
#  password:  jenkins
EOF

sed -i "s|password:.*|password: \"${DB_PASS}\"|" /var/www/html/redmine/config/database.yml
sed -i 's/\r$//' /var/www/html/redmine/bin/*

cd /var/www/html/redmine

mkdir -p tmp tmp/pids tmp/cache tmp/sockets log

bundle install
gem install passenger
passenger-install-apache2-module --auto

SECRET_KEY_BASE=$(bin/rails secret)

if [ ! -f config/master.key ]; then
  EDITOR="tee" bin/rails credentials:edit <<EOF
secret_key_base: ${SECRET_KEY_BASE}
EOF
fi

chown www-data:www-data config/master.key
chmod 600 config/master.key

bundle exec rake db:migrate RAILS_ENV=production
bundle exec rake redmine:load_default_data RAILS_ENV=production <<EOF
ja
EOF

bundle exec rake assets:precompile RAILS_ENV=production
chown -R www-data:www-data /var/www/html/redmine

cat > /etc/apache2/conf-available/redmine.conf <<EOF
<Directory "/var/www/html/redmine/public">
  Require all granted
  Allow from all
  Options Indexes FollowSymLinks
</Directory>

LoadModule passenger_module $(passenger-config --root)/buildout/apache2/mod_passenger.so

<IfModule mod_passenger.c>
  PassengerRoot $(passenger-config --root)
  PassengerRuby $(which ruby)
</IfModule>

PassengerMaxPoolSize 20
PassengerMaxInstancesPerApp 4
PassengerPoolIdleTime 864000
PassengerStatThrottleRate 10
EOF

a2enconf redmine
sed -i 's|DocumentRoot /var/www/html|DocumentRoot /var/www/html/redmine/public|' /etc/apache2/sites-available/000-default.conf
systemctl restart apache2

cat > /etc/motd <<EOF
================================================
Redmine application

Redmine URL: http://${IPADDR}/
Redmine Admin Login: admin/admin

MySQL root password: ${DB_ROOTPW}
MySQL redmine user name: redmineuser
MySQL redmine user pass: ${DB_PASS}
MySQL redmine DB name: redmine

To delete this message: rm -f /etc/motd
===============================================
EOF