import jinja2
import json
import os

ACME_CONTENT = '''
location /.well-known/acme-challenge/ {
    auth_basic off;
    alias /var/www/.well-known/acme-challenge/;
}
'''

def dump_config(vmList, masterAddress):

    with open("/etc/nginx/iptables.sh", "w") as f:
        f.write("#!/bin/bash\n\n")
        f.write("ip route add local 0.0.0.0/0 dev lo table 100\n")
        f.write("ip rule add fwmark 1 lookup 100\n")
        for vmo in vmList:
            [ f.write(c) for c in vmo.dumpIptables()]

    with open("/etc/nginx/iptables-clear.sh", "w") as f:
        f.write("#!/bin/bash\n\n")
        f.write("ip route delete local 0.0.0.0/0 dev lo table 100\n")
        f.write("ip rule delete fwmark 1 lookup 100\n")
        for vmo in vmList:
            [ f.write(c) for c in vmo.dumpIptables(remove=True)]

    with open("/etc/nginx/stream_include.conf", "w") as f:

        # ssl passthrough/no-terminate #
        ssl_passthrough_map = []
        for vmo in vmList:
            relevant_subdomains = filter(lambda x: x.get("no-terminate-ssl"), vmo.subdomains)
            for s in relevant_subdomains:
                # print(s, "ssl_target_port", s.get("ssl_target_port"))
                # build the map contents #
                if s.get("include-subdomains"):
                    match = "~.*{}".format(s.get("name"))
                else:
                    match = s.get("name")

                ssl_target_port = s.get("ssl_target_port") or 443
                ssl_passthrough_map.append("{} {}:{};".format(match, vmo.ip, ssl_target_port))

        environment = jinja2.Environment(loader=jinja2.FileSystemLoader(searchpath="./templates"))
        template = environment.get_template("nginx_stream_ssl_map.conf.j2")
        f.write(template.render(ssl_passthrough_map=ssl_passthrough_map))


        for vmo in vmList:
            [ f.write(c) for c in vmo.dumpStreamComponents()]
        for vmo in set(vmList):
            [ f.write(c) for c in vmo.dumpSshFowardsNginx()]

    with open("/etc/nginx/http_include.conf", "w") as f:
        for vmo in vmList:
            [ f.write(c) for c in vmo.dumpServerComponents()]

    with open("/etc/nginx/acme-challenge.conf", "w") as f:
        f.write(ACME_CONTENT)

    with open("/etc/nginx/cert.sh", "w") as f:

        f.write("certbot certonly --webroot -w /var/www \\\n")
        domains = []
        for vmo in vmList:
            for subdomain in vmo.subdomains:
                if vmo.noTerminateACME:
                    print("Not terminating ACME for: {}".format(subdomain.get("name")))
                    continue
                if type(subdomain) == dict:
                    domains.append(subdomain["name"])
                else:
                    domains.append(subdomain)

        f.write("    -d {} \\\n".format(masterAddress))
        for d in set(domains):
            if d == masterAddress:
                continue
            f.write("    -d {} \\\n".format(d))

        f.write("--rsa-key-size 2048 --expand")

    with open("/etc/nginx/nginx.conf", "w") as f:

        with open("./config/nginx.json") as j:

            nginxJson = json.load(j)
            env = jinja2.Environment(loader=jinja2.FileSystemLoader(searchpath="./templates"))
            template = env.get_template("nginx.conf.j2")
            mapsTemplate = env.get_template("nginx_maps.j2")
            nginxJson["maps"] = mapsTemplate.render()
            content = template.render(nginxJson)

            f.write(content)

def check_transparent_proxy_loader():
    retcode = os.system("systemctl -q is-enabled nginx-iptables.service")
    if retcode != 0:
        print("############################ WARNING ###############################")
        print("+++ You may have transparent proxy rules but the service to load +++")
        print("+++ them is not enabled or missing, a restart WILL break your    +++")
        print("+++ setup! Look at nginx-iptables.service in the project root    +++")
        print("############################ WARNING ###############################")