#!/bin/bash
# Buildfor Life Budget - Server Setup Script
# Run on a fresh Debian/Ubuntu Proxmox VM

set -euo pipefail

APP_USER="budget-app"
APP_DIR="/opt/buildfor-life-budget"
DOMAIN="budget.b4l.co.th"

echo "=== Installing dependencies ==="
apt-get update
apt-get install -y nginx certbot python3-certbot-nginx postgresql nodejs npm

echo "=== Setting up PostgreSQL ==="
sudo -u postgres psql <<SQL
CREATE USER budget_app WITH PASSWORD 'CHANGE_ME_IMMEDIATELY';
CREATE DATABASE buildfor_life_budget OWNER budget_app;
SQL

echo "=== Creating app user ==="
useradd --system --no-create-home --shell /usr/sbin/nologin $APP_USER

echo "=== Creating app directory ==="
mkdir -p $APP_DIR
chown $APP_USER:$APP_USER $APP_DIR

echo "=== Copying nginx config ==="
cp nginx.conf /etc/nginx/sites-available/$DOMAIN
ln -sf /etc/nginx/sites-available/$DOMAIN /etc/nginx/sites-enabled/
nginx -t && systemctl reload nginx

echo "=== Setting up SSL ==="
certbot --nginx -d $DOMAIN --non-interactive --agree-tos --email admin@b4l.co.th

echo "=== Installing systemd service ==="
cp buildfor-life-budget.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable buildfor-life-budget

echo ""
echo "=== Setup complete ==="
echo "Next steps:"
echo "1. Copy the built application to $APP_DIR"
echo "2. Create $APP_DIR/.env (see .env.example)"
echo "3. Run: cd $APP_DIR && npx drizzle-kit migrate"
echo "4. Run: systemctl start buildfor-life-budget"
echo "5. CHANGE the PostgreSQL password!"