#!/bin/sh
# Housecarl: runs after the package's files are in place.
set -e

if [ "$1" = configure ]; then
	# The housecarl system user and Housecarl's directories: /etc/housecarl,
	# /var/lib/housecarl and /var/backups/housecarl.
	systemd-sysusers housecarl.conf
	systemd-tmpfiles --create housecarl.conf || true

	# An example configuration on the first install; an existing one is
	# never touched.
	if [ ! -e /etc/housecarl/housecarl.yaml ]; then
		/usr/bin/housecarld config --example > /etc/housecarl/housecarl.yaml.dpkg-new
		chown root:housecarl /etc/housecarl/housecarl.yaml.dpkg-new
		chmod 0640 /etc/housecarl/housecarl.yaml.dpkg-new
		mv /etc/housecarl/housecarl.yaml.dpkg-new /etc/housecarl/housecarl.yaml
	fi

	# The daily database backup (housecarl-backup.timer) is on by default. An
	# administrator's 'systemctl disable housecarl-backup.timer' is remembered
	# by deb-systemd-helper and kept across upgrades. Before 'housecarld init'
	# the backup skips itself (there is no database yet).
	if command -v deb-systemd-helper >/dev/null 2>&1; then
		deb-systemd-helper unmask housecarl-backup.timer >/dev/null || true
		if deb-systemd-helper --quiet was-enabled housecarl-backup.timer; then
			deb-systemd-helper enable housecarl-backup.timer >/dev/null || true
		else
			deb-systemd-helper update-state housecarl-backup.timer >/dev/null || true
		fi
	elif [ -z "$2" ] && [ -d /run/systemd/system ]; then
		systemctl enable housecarl-backup.timer >/dev/null 2>&1 || true
	fi

	# The boot unit loads the last confirmed ruleset before the network comes
	# up; it does nothing until housecarld has saved one.
	if [ -z "$2" ] && [ -d /run/systemd/system ]; then
		systemctl enable housecarl-ruleset.service >/dev/null 2>&1 || true
	fi

	if [ -d /run/systemd/system ]; then
		systemctl daemon-reload || true
		if systemctl is-enabled --quiet housecarl-backup.timer 2>/dev/null; then
			systemctl start housecarl-backup.timer || true
		fi
		# An upgrade restarts a running housecarld (its database is upgraded
		# when it starts). A first install starts nothing: Housecarl needs
		# 'housecarld init' first.
		if [ -n "$2" ] && systemctl is-active --quiet housecarl.service; then
			systemctl restart housecarl.service || echo "housecarl: restarting housecarld failed; see 'journalctl -u housecarl'" >&2
		fi
	fi

	if [ -z "$2" ]; then
		echo "Housecarl is installed. Next: create the database and start it, as described"
		echo "in /usr/share/doc/housecarl/docs/install.md:"
		echo "  sudo -u housecarl housecarld init && sudo systemctl enable --now housecarl"
		echo "To bring your current nftables ruleset over: sudo hc import --defines /etc/nftables.conf -n"
		echo "(docs/import.md). Housecarl only writes its own table, inet housecarl."
	fi
fi

exit 0