#!/usr/bin/env bash
# Insert / update Meshkee payment-callback proxy locations on a storefront nginx site.
# Bank gateways (ZarinPal/Mellat) hit https://{host}/meshkee/payments/{gateway}/callback
# which proxies to the API tenant callback route.
set -euo pipefail

HOST="${1:-}"
API_HOST="${MESHKEE_API_HOST:-api.meshkee.com}"

if [[ -z "$HOST" ]]; then
  echo "usage: patch-nginx-pay.sh <host>" >&2
  exit 1
fi

NGINX_AVAILABLE="/etc/nginx/sites-available/$HOST"

if [[ ! -f "$NGINX_AVAILABLE" ]]; then
  echo "missing nginx site for $HOST" >&2
  exit 1
fi

proxy_location() {
  local gateway="$1"
  local path="/meshkee/payments/${gateway}/callback"
  cat <<NGINX
    location = ${path} {
        proxy_pass https://${API_HOST}/api/v1/tenants/${HOST}/payments/${gateway}/callback;
        proxy_set_header Host ${API_HOST};
        proxy_ssl_server_name on;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;
        proxy_pass_request_body on;
        proxy_pass_request_headers on;
    }

NGINX
}

ensure_location() {
  local gateway="$1"
  local path="/meshkee/payments/${gateway}/callback"
  if grep -qF "location = ${path}" "$NGINX_AVAILABLE"; then
    echo "already present: ${path}"
    return 0
  fi

  local block
  block="$(proxy_location "$gateway")"
  local tmp
  tmp="$(mktemp)"
  awk -v block="$block" '
    /location \/ \{/ && !done {
      print block
      done = 1
    }
    { print }
  ' "$NGINX_AVAILABLE" >"$tmp"
  mv "$tmp" "$NGINX_AVAILABLE"
  echo "added: ${path}"
}

ensure_location zarinpal
ensure_location mellat

nginx -t
systemctl reload nginx
echo "patched nginx payment callback locations for $HOST"