#!/bin/bash
set -euo pipefail

# Manual SSL Configuration Guide for Nginx Proxy Manager
# This script provides step-by-step instructions and can help verify configuration

set -e

NPM_URL="http://192.168.11.26:81"
DOMAINS_FILE="/tmp/npm-domains-list.txt"

echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📋 Nginx Proxy Manager Manual SSL Configuration Guide"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo ""
echo "Since automated login is having issues, here's a manual approach:"
echo ""
echo "1. Open Nginx Proxy Manager in your browser:"
echo "   $NPM_URL"
echo ""
echo "2. Log in with your credentials"
echo ""
echo "3. For each domain below, follow these steps:"
echo "   a. Click 'Proxy Hosts' → 'Add Proxy Host'"
echo "   b. Fill in Details tab"
echo "   c. Go to SSL tab → Request Let's Encrypt certificate"
echo "   d. Enable Force SSL, HTTP/2, HSTS"
echo "   e. Save"
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📝 Domains to Configure (19 total):"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo ""

cat > "$DOMAINS_FILE" << 'DOMAINS'
sankofa.nexus → http://192.168.11.140:80
www.sankofa.nexus → http://192.168.11.140:80
phoenix.sankofa.nexus → http://192.168.11.140:80
www.phoenix.sankofa.nexus → http://192.168.11.140:80
the-order.sankofa.nexus → http://192.168.11.140:80
explorer.d-bis.org → http://192.168.11.140:80
rpc-http-pub.d-bis.org → https://192.168.11.252:443 (WebSocket)
rpc-ws-pub.d-bis.org → https://192.168.11.252:443 (WebSocket)
rpc-http-prv.d-bis.org → https://192.168.11.251:443 (WebSocket)
rpc-ws-prv.d-bis.org → https://192.168.11.251:443 (WebSocket)
dbis-admin.d-bis.org → http://192.168.11.130:80
dbis-api.d-bis.org → http://192.168.11.155:3000
dbis-api-2.d-bis.org → http://192.168.11.156:3000
secure.d-bis.org → http://192.168.11.130:80
mim4u.org → http://192.168.11.36:80
www.mim4u.org → http://192.168.11.36:80
secure.mim4u.org → http://192.168.11.36:80
training.mim4u.org → http://192.168.11.36:80
rpc.public-0138.defi-oracle.io → https://192.168.11.252:443
DOMAINS

cat "$DOMAINS_FILE" | nl -w2 -s'. '

echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "✅ After configuration, verify with:"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo ""
echo "curl -I https://explorer.d-bis.org"
echo "curl -I https://sankofa.nexus"
echo ""
echo "Full guide: docs/04-configuration/NGINX_PROXY_MANAGER_SSL_CONFIGURATION.md"
echo ""