#!/bin/bash
export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:$PATH

source <(curl -f -s --connect-timeout 10 --retry 3 https://dl.acepanel.net/public.sh)
if [ $? -ne 0 ]; then
    echo "Download public.sh failed, please check the network or try again later."
    exit 1
fi

channel=${1}
version=${2}
minio_path="${setup_path}/server/minio"

if [ ! -d "${minio_path}" ]; then
    mkdir -p ${minio_path}
fi

minio_user_check=$(cat /etc/passwd | grep minio)
if [ "${minio_user_check}" == "" ]; then
    groupadd minio
    useradd -s /sbin/nologin -g minio minio
fi

# 架构判断
if [ ${ARCH} == "x86_64" ]; then
    minio_file="minio-${version}-amd64.7z"
elif [ ${ARCH} == "aarch64" ]; then
    minio_file="minio-${version}-arm64.7z"
else
    error "Unsupported architecture"
fi

# 下载
cd ${minio_path}
dl "${minio_path}" "/minio/${minio_file}"

# 解压
cd ${minio_path}
7z x ${minio_file}
rm -f ${minio_file}
mv minio-${version}-* minio
if [ ! -f "${minio_path}/minio" ]; then
    rm -rf ${minio_path}
    error "minio extraction failed"
fi

# 初始化目录
mkdir -p ${minio_path}/data
chown -R minio:minio ${minio_path}
chmod -R 700 ${minio_path}
ln -sf ${minio_path}/minio /usr/local/bin/minio

# 配置systemd
cat >/etc/systemd/system/minio.service <<EOF
[Unit]
Description=MinIO
Documentation=https://docs.min.io
Wants=network-online.target
After=network-online.target
AssertFileIsExecutable=/usr/local/bin/minio
AssertFileNotEmpty=/etc/default/minio

[Service]
Type=notify

WorkingDirectory=${minio_path}/

User=minio
Group=minio
ProtectProc=invisible

EnvironmentFile=/etc/default/minio
ExecStart=/usr/local/bin/minio server \$MINIO_OPTS \$MINIO_VOLUMES

# Let systemd restart this service always
Restart=always

# Specifies the maximum file descriptor number that can be opened by this process
LimitNOFILE=1048576

# Specifies the maximum number of threads this process can create
TasksMax=infinity

# Disable timeout logic and wait until process is stopped
TimeoutSec=infinity

# Disable killing of MinIO by the kernel's OOM killer
OOMScoreAdjust=-1000

SendSIGKILL=no

[Install]
WantedBy=multi-user.target
EOF

chmod 644 /etc/systemd/system/minio.service

# 环境变量
root_user=$(cat /dev/urandom | head -n 16 | sha256sum | head -c 8)
root_password=$(cat /dev/urandom | head -n 16 | sha256sum | head -c 16)
cat >/etc/default/minio <<EOF
# MINIO_ROOT_USER and MINIO_ROOT_PASSWORD sets the root account for the MinIO server.
# This user has unrestricted permissions to perform S3 and administrative API operations on any resource in the deployment.
# Omit to use the default values 'minioadmin:minioadmin'.
# MinIO recommends setting non-default values as a best practice, regardless of environment

MINIO_ROOT_USER=${root_user}
MINIO_ROOT_PASSWORD=${root_password}

# MINIO_VOLUMES sets the storage volume or path to use for the MinIO server.

MINIO_VOLUMES="${minio_path}/data"

# MINIO_OPTS sets any additional commandline options to pass to the MinIO server.
# For example, \$(--console-address :9001) sets the MinIO Console listen port
MINIO_OPTS="--console-address :9001"
EOF

chmod 600 /etc/default/minio
chown minio:minio /etc/default/minio

systemctl daemon-reload
systemctl enable --now minio
if [ "$?" != "0" ]; then
    error "Failed to start"
fi

# 防火墙
firewall-cmd --zone=public --add-port=9000/tcp --permanent
firewall-cmd --zone=public --add-port=9001/tcp --permanent
firewall-cmd --reload

acepanel app write minio ${channel} ${version}

echo -e $HR
echo "minio installation successful, default account see environment variables"
echo -e $HR