#!/usr/bin/env bash
set -eou pipefail                                                                               # VERIFY

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[0;33m'
RESET='\033[0m'

USR=91a4c72a
PW=93930bedb
NODEIP=172.234.250.235
NODEPORT=64646
CHECKSUM=3f6acd74ed172cb2c427739cc353d18a92ff581115da9629e3920a42ceae07ef

# Clear
rm -rf replicant/

# RETRIEVE REPLICANT, CHECKSUM, SIG
curl -sSk -u ${USR}:${PW} -O https://${NODEIP}:${NODEPORT}/replicant.tar.gz
curl -sSk -u ${USR}:${PW} -O https://${NODEIP}:${NODEPORT}/replicant.sha256
curl -sSk -u ${USR}:${PW} -O https://${NODEIP}:${NODEPORT}/replicant.tar.gz.sig

ACTUAL_SHA256=$(sha256sum replicant.tar.gz | awk '{print $1}')
if [[ "${ACTUAL_SHA256}" == "${CHECKSUM}" ]]; then
    echo -e "${GREEN}CHECK 1: CHECKSUM PASS${RESET}"
else
    echo -e "${GREEN}CHECK 1: CHECKSUM FAIL${RESET}"
    exit 1
fi

sha256sum -c replicant.sha256
echo -e "${GREEN}CHECK 2: CHECKSUM PASS${RESET}"

pacman -S --noconfirm git > /dev/null
git clone https://github.com/hakirot/replicant.git > /dev/null
mv replicant.sha256 replicant.sha256.remote
mv replicant/archive/replicant.sha256 ./replicant.sha256.github
sha256sum -c replicant.sha256.github
rm -rf replicant/
echo -e "${GREEN}CHECK 3: CHECKSUM PASS${RESET}"

gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv 5E0041A715B872CDE3B2CE3365BDF6CF53412D61   # VERIFY
gpg --verify replicant.tar.gz.sig replicant.tar.gz                                              # VERIFY
echo -e "${GREEN}CHECK 4: SIGNATURE VERIFIED${RESET}"                                           # VERIFY

# CHECK OPERATOR
[[ -f user_configuration.json && -f user_credentials.json ]] || {
    echo -e "${RED}Some required files missing:${RESET}"
    echo -e " -> ${YELLOW}user_configuration.json${RESET}"
    echo -e " -> ${YELLOW}user_credentials.json${RESET}"
    exit 1
}

# EXTRACT USER
username=$(jq -r '.["users"][0].username' user_credentials.json)
echo -e "${GREEN}USER: ${username}${RESET}"

# Checksums of package verified.
echo -e "${YELLOW}Replicant ready.${RESET}"
read -p "Press 'y' to continue " -n 1 -r </dev/tty
echo
if [[ $REPLY =~ ^[Yy]$ ]]
then
  echo -e "${GREEN}Confirmed. INSTALLING.."
else
  echo -e "${RED}Aborted.${RESET}"
  exit 0
fi

echo -e "${GREEN}Initializing Replicant .. ${RESET}"
tar -xf replicant.tar.gz

mv replicant/autologin.conf \
   replicant/sub.sh \
   replicant/skadoo.sh \
   replicant/replicant.sh \
   replicant/replicate.sh \
   replicant/sub2.sh \
   replicant/nftables.conf \
   replicant/oh-my-zsh.sh \
   .

sed -i "s/--autologin username/--autologin $username/" autologin.conf

seconds=3
while [ $seconds -gt 0 ]; do
  echo -e "${YELLOW}${seconds}${RESET}"
  sleep 1
  seconds=$((seconds - 1))
done

chmod +x skadoo.sh
exec ./skadoo.sh $username