##########################
# 0. Variables à adapter #
##########################
DOMAIN="xxx.agoralogie.fr"
PATHWWW="pathxxx"
DB_PASS="123456789"
NC_ADMIN="adminncyyy"
NC_ADMIN_PASS="azerty"
DB_NAME="bsnczzzzz"
DB_USR="usrnczzzzz"

TURN_SECRET=$(openssl rand -hex 32)      # ou définissez votre propre secret
EMAIL="postmaster@$DOMAIN"               # pour Let’s Encrypt

##########################
# 1. Mises à jour système
##########################

apt-get update
apt-get -y install vim git
wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | tee /etc/apt/sources.list.d/php.list
apt-get update
echo "PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\"" >>/root/.bashrc
source /root/.bashrc

############################
# 2. Paquets indispensables
############################
apt install -y apache2 mariadb-server \
 php8.2-{fpm,cli,common,gd,imagick,mbstring,intl,xml,zip,curl,bcmath,imap,mysql} \
 libapache2-mod-fcgid unzip ufw certbot python3-certbot-apache coturn bzip2 php-xml


###########################
# 3. Base de données MariaDB
###########################
mysql -u root <<EOF
CREATE DATABASE $DB_NAME CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
CREATE USER $DB_USR@'localhost' IDENTIFIED BY '$DB_PASS';
GRANT ALL PRIVILEGES ON $DB_NAME.* TO $DB_USR@'localhost';
FLUSH PRIVILEGES;
EOF

###########################################
# 4. PHP-FPM (mémoire + upload + timezone)
###########################################
sed -Ei 's/^memory_limit.*/memory_limit = 512M/' /etc/php/8.2/fpm/php.ini
sed -Ei 's/^upload_max_filesize.*/upload_max_filesize = 1024M/' /etc/php/8.2/fpm/php.ini
sed -Ei 's/^post_max_size.*/post_max_size = 1024M/' /etc/php/8.2/fpm/php.ini
sed -Ei 's|^;?date\.timezone.*|date.timezone = Europe/Paris|' /etc/php/8.2/fpm/php.ini
systemctl restart php8.2-fpm

##################################
# 5. Téléchargement de Nextcloud
##################################
cd /var/www
wget https://download.nextcloud.com/server/releases/latest.tar.bz2
tar -xjf latest.tar.bz2
mv nextcloud $PATHWWW
chown -R www-data:www-data $PATHWWW
mkdir -p /var/www/$PATHWWW-data
chown www-data:www-data /var/www/$PATHWWW-data
rm latest.tar.bz2

########################################
# 6. VirtualHost Apache (port 80 only)S
########################################
cat <<APACHE >/etc/apache2/sites-available/$DOMAIN.conf
<VirtualHost *:80>
    ServerName $DOMAIN
    DocumentRoot /var/www/$PATHWWW

    <Directory /var/www/$PATHWWW/>
        Require all granted
        AllowOverride All
        Options FollowSymLinks MultiViews
    </Directory>

    ErrorLog \${APACHE_LOG_DIR}/$DOMAIN-error.log
    CustomLog \${APACHE_LOG_DIR}/$DOMAIN-access.log combined

    <FilesMatch \.php$>
        SetHandler "proxy:unix:/run/php/php8.2-fpm.sock|fcgi://localhost"
    </FilesMatch>
</VirtualHost>
APACHE

a2enmod rewrite headers env dir mime ssl http2 proxy_fcgi setenvif
a2ensite $DOMAIN.conf
systemctl reload apache2

########################################
# 7. HTTPS Let’s Encrypt (Certbot)
########################################
certbot --apache --non-interactive --agree-tos -m "$EMAIL" -d "$DOMAIN" --redirect

php /var/www/$PATHWWW/occ maintenance:install \
 --database "mysql" --database-name $DB_NAME \
 --database-user $DB_USR --database-pass "$DB_PASS" \
 --admin-user "$NC_ADMIN" --admin-pass "$NC_ADMIN_PASS" \
 --data-dir "/var/www/$PATHWWW-data"

 sed -Ei "s/^\);/ 'encryption_enabled' => true ); /" /var/www/$PATHWWW/config/config.php
 sed -Ei "s/.*0 =.*/ 0 => '*' /" /var/www/$PATHWWW/config/config.php
 
 chown -R www-data:www-data $PATHWWW