# Wordpress

set -euo pipefail

WP_VERSION="7.0.3"
WP_ARCHIVE="wordpress-${WP_VERSION}-ja.tar.gz"

WEB_ROOT="/var/www/html/wordpress"

DB_NAME="wordpress"
DB_USER="wpuser"



echo "[INFO] install packages"
for i in {1..5}; do
  DEBIAN_FRONTEND=noninteractive apt update -y && \
  DEBIAN_FRONTEND=noninteractive apt install -y \
    apache2 \
    mariadb-server \
    mariadb-client \
    curl \
    bzip2 \
    unzip \
    openssl && \
  break

  [[ "$i" -eq 5 ]] && exit 1 || sleep 5
done

## PHP
PHP_VERSION="8.4"
for i in {1..5}; do
  DEBIAN_FRONTEND=noninteractive apt install -y software-properties-common gnupg2 \
  && DEBIAN_FRONTEND=noninteractive add-apt-repository ppa:ondrej/php -y \
  && DEBIAN_FRONTEND=noninteractive apt update -y \
  && DEBIAN_FRONTEND=noninteractive apt install -y \
    php${PHP_VERSION} \
    php${PHP_VERSION}-mysql \
    libapache2-mod-php${PHP_VERSION} \
    php${PHP_VERSION}-curl \
    php${PHP_VERSION}-gd \
    php${PHP_VERSION}-imap \
    php${PHP_VERSION}-intl \
    php${PHP_VERSION}-mbstring \
    php${PHP_VERSION}-xml \
    php${PHP_VERSION}-xmlrpc \
    php${PHP_VERSION}-zip \
    php${PHP_VERSION}-imagick \
    php${PHP_VERSION}-bcmath \
    php${PHP_VERSION}-gmp \
    php${PHP_VERSION}-apcu \
    php${PHP_VERSION}-redis \
  && break
  [[ "$i" -eq 5 ]] && exit 1 || sleep 5
done

echo "[INFO] start services"
systemctl enable --now mariadb
for i in {1..10}; do
  systemctl is-active --quiet mariadb.service && break
  sleep 3
done

systemctl enable --now apache2
for i in {1..10}; do
  systemctl is-active --quiet apache2.service && break
  sleep 3
done

echo "[INFO] create database"

### wait for mysql-setup succeed

generate_pass() {
  cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1 || true
}
DB_PASS="${DB_PASS:-$(generate_pass)}"

mysql <<EOF
CREATE DATABASE IF NOT EXISTS \`${DB_NAME}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';
ALTER USER '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';
GRANT ALL PRIVILEGES ON \`${DB_NAME}\`.* TO '${DB_USER}'@'localhost';
FLUSH PRIVILEGES;
EOF

maria_pass=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1 || true`

for i in {1..10}; do
  mysql -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '${maria_pass}'; FLUSH PRIVILEGES;" && break
  [[ "$i" -eq 10 ]] && exit 1 || sleep 3
done


echo "[INFO] download wordpress ${WP_VERSION}"
cd /tmp
rm -rf /tmp/wordpress "/tmp/${WP_ARCHIVE}"

curl -fL \
  --retry 10 \
  --retry-delay 5 \
  --retry-connrefused \
  --retry-all-errors \
  -o "${WP_ARCHIVE}" \
  "https://ja.wordpress.org/${WP_ARCHIVE}" \
  --fail

tar -xzf "${WP_ARCHIVE}"

echo "[INFO] deploy files"
rm -rf "${WEB_ROOT}"
mkdir -p /var/www/html
mv /tmp/wordpress "${WEB_ROOT}"
chown -R www-data:www-data /var/www/html/wordpress
chmod -R 755 /var/www/html/wordpress

echo "[INFO] apache config"

sed -i \
  -e 's#DocumentRoot /var/www/html#DocumentRoot /var/www/html/wordpress#' \
  -e '/#Include conf-available\/serve-cgi-bin.conf/a\
        <Directory /var/www/html>\
              AllowOverride All\
        </Directory>' \
  /etc/apache2/sites-available/000-default.conf

rm -f /etc/apache2/sites-available/default-ssl.conf

systemctl restart apache2

for i in {1..10}; do
  systemctl is-active --quiet apache2.service && break
  sleep 3
done

cat >> /var/www/html/phpinfo.php <<'EOF'
<?php
    phpinfo();

EOF

cat >> /etc/motd <<EOF
==========================================================
WordPress Application

DocumentRoot:                  /var/www/html/wordpress
WordPress URL:                 http://${IPADDR}/
MySQL root password:           ${maria_pass}

MySQL WordPress user name:     wpuser
MySQL WordPress user password: ${DB_PASS}
MySQL WordPress DB   name:     wordpress

To delete this message: unlink /etc/motd
==========================================================
EOF