#!/bin/sh
set -e

NEXUS_URL="${NEXUS_URL:-http://nexus:8081}"
ADMIN_PASSWORD="${ADMIN_PASSWORD:-admin123}"
WEBHOOK_URL="${WEBHOOK_URL:-http://guarddog-nexus:8080/webhooks/nexus}"

apk add --no-cache curl >/dev/null 2>&1 || true

echo "Waiting for Nexus to start..."
MAX_WAIT=300
ELAPSED=0
while [ $ELAPSED -lt $MAX_WAIT ]; do
    if curl -sf -o /dev/null "${NEXUS_URL}/service/rest/v1/status" 2>/dev/null; then
        echo "Nexus is up."
        break
    fi
    sleep 5
    ELAPSED=$((ELAPSED + 5))
done

if [ $ELAPSED -ge $MAX_WAIT ]; then
    echo "Timed out waiting for Nexus" >&2
    exit 1
fi

AUTH_PASS="$ADMIN_PASSWORD"
if [ -f /nexus-data/admin.password ]; then
    AUTH_PASS=$(cat /nexus-data/admin.password)
    echo "Using initial admin password from volume"
fi

echo "Creating PyPI proxy repository..."
curl -sf -u "admin:${AUTH_PASS}" \
    -H "Content-Type: application/json" \
    -X POST \
    -d "{
        \"name\": \"pypi-proxy\",
        \"online\": true,
        \"storage\": {
            \"blobStoreName\": \"default\",
            \"strictContentTypeValidation\": true
        },
        \"proxy\": {
            \"remoteUrl\": \"https://pypi.org\",
            \"contentMaxAge\": 1440,
            \"metadataMaxAge\": 1440
        },
        \"negativeCache\": {
            \"enabled\": true,
            \"timeToLive\": 1440
        },
        \"httpClient\": {
            \"blocked\": false,
            \"autoBlock\": true,
            \"connection\": {
                \"timeout\": 60,
                \"retries\": 3
            }
        }
    }" \
    "${NEXUS_URL}/service/rest/v1/repositories/pypi/proxy" 2>/dev/null || \
    echo "Proxy repo may already exist, continuing..."

echo ""
echo "NOTE: Webhook setup is not available in Nexus OSS/Community edition."
echo "In Nexus Pro, configure:"
echo "  Capability: Webhook: Repository"
echo "  URL: ${WEBHOOK_URL}"
echo "  Event types: repository.component, repository.asset"
echo "  Repository filter: pypi-proxy"
echo ""

if [ -f /nexus-data/admin.password ]; then
    echo "Changing default admin password..."
    curl -sf -u "admin:${AUTH_PASS}" \
        -H "Content-Type: text/plain" \
        -X PUT \
        -d "${ADMIN_PASSWORD}" \
        "${NEXUS_URL}/service/rest/v1/security/users/admin/change-password" 2>/dev/null || true
fi

echo "Nexus setup complete."