#!/usr/bin/env bash
# ==============================================================================
# start-gitea.sh — 启动 Gitea 私有代码托管中枢 (Mac SSD 热层 + 极空间 NAS 冷层归档)
# HTTP 端口: 3005 | 内置 Git SSH 端口: 2222
# ==============================================================================
set -euo pipefail

export HOME="/Users/ixvii0iv"
export USER="ixvii0iv"
export USERNAME="ixvii0iv"
export LANG="en_US.UTF-8"
export LC_ALL="en_US.UTF-8"
export PATH="/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin"

HOT_DIR="/Users/ixvii0iv/homelab/stacks/git"
mkdir -p "$HOT_DIR/data/repositories" \
         "$HOT_DIR/data/lfs" \
         "$HOT_DIR/data/attachments" \
         "$HOT_DIR/data/packages" \
         "$HOT_DIR/data/repo-archive" \
         "$HOT_DIR/custom/conf" \
         "$HOT_DIR/log"

CONF_FILE="$HOT_DIR/custom/conf/app.ini"
if [ ! -f "$CONF_FILE" ]; then
  SECRET_KEY=$(/opt/homebrew/opt/gitea/bin/gitea generate secret SECRET_KEY)
  INTERNAL_TOKEN=$(/opt/homebrew/opt/gitea/bin/gitea generate secret INTERNAL_TOKEN)
  JWT_SECRET=$(/opt/homebrew/opt/gitea/bin/gitea generate secret JWT_SECRET)
  LFS_JWT_SECRET=$(/opt/homebrew/opt/gitea/bin/gitea generate secret LFS_JWT_SECRET)

  cat > "$CONF_FILE" <<EOF
APP_NAME = HomeLab Git Hub (Mac SSD Hot + ZSpace 20TB Cold)
RUN_USER = ixvii0iv
RUN_MODE = prod
WORK_PATH = $HOT_DIR

[server]
PROTOCOL = http
DOMAIN = git.961504.xyz
ROOT_URL = https://git.961504.xyz/
HTTP_ADDR = 0.0.0.0
HTTP_PORT = 3005
DISABLE_SSH = false
START_SSH_SERVER = true
SSH_DOMAIN = 192.168.31.164
SSH_PORT = 2222
SSH_LISTEN_PORT = 2222
LFS_START_SERVER = true
LFS_JWT_SECRET = $LFS_JWT_SECRET
OFFLINE_MODE = false

[database]
DB_TYPE = sqlite3
PATH = $HOT_DIR/data/gitea.db

[repository]
ROOT = $HOT_DIR/data/repositories
DEFAULT_BRANCH = main

[lfs]
STORAGE_TYPE = local
PATH = $HOT_DIR/data/lfs

[attachment]
STORAGE_TYPE = local
PATH = $HOT_DIR/data/attachments
MAX_SIZE = 2048
MAX_FILES = 50

[packages]
STORAGE_TYPE = local
PATH = $HOT_DIR/data/packages

[repo-archive]
STORAGE_TYPE = local
PATH = $HOT_DIR/data/repo-archive

[security]
INSTALL_LOCK = true
SECRET_KEY = $SECRET_KEY
INTERNAL_TOKEN = $INTERNAL_TOKEN
PASSWORD_HASH_ALGO = pbkdf2
REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,100.64.0.0/10,192.168.0.0/16,::1/128

[oauth2]
JWT_SECRET = $JWT_SECRET

[service]
DISABLE_REGISTRATION = true
REQUIRE_SIGNIN_VIEW = false
ENABLE_NOTIFY_MAIL = false
ENABLE_REVERSE_PROXY_AUTHENTICATION = true
ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = true
REVERSE_PROXY_AUTHENTICATION_USER = X-Webauth-User

[log]
MODE = console
LEVEL = Info
ROOT_PATH = $HOT_DIR/log
EOF
fi

exec /opt/homebrew/opt/gitea/bin/gitea web --work-path "$HOT_DIR" --custom-path "$HOT_DIR/custom" --config "$CONF_FILE"