Name:           wireguard-ui
Version:        0.6.2
Release:        1%{?dist}
Summary:        Wireguard web interface 

License:        MIT license
URL:            https://github.com/ngoduykhanh/wireguard-ui
%undefine _disable_source_fetch
Source0:        https://github.com/ngoduykhanh/wireguard-ui/releases/download/v0.6.2/wireguard-ui-v0.6.2-linux-amd64.tar.gz
BuildRequires: systemd-rpm-macros
BuildRequires: systemd
%{?systemd_requires}
Requires:   wireguard-tools

%description
Wireguard web interface 

%install
rm -rf $RPM_BUILD_ROOT
tar -xvf %{_sourcedir}/wireguard-ui-v0.6.2-linux-amd64.tar.gz
install -d -m 0755 $RPM_BUILD_ROOT/usr/bin/
install -p -m 0755 wireguard-ui $RPM_BUILD_ROOT/usr/bin/wireguard-ui
install -d -m 0755 $RPM_BUILD_ROOT/etc/wireguard-ui
install -d -m 0755 $RPM_BUILD_ROOT/usr/lib/systemd/system
cat << EOF > $RPM_BUILD_ROOT/usr/lib/systemd/system/wgui.service
[Unit]
Description=Restart WireGuard
After=network.target

[Service]
Type=oneshot
ExecStart=/usr/bin/systemctl restart wg-quick@wg0.service

[Install]
RequiredBy=wgui.path
EOF

cat >$RPM_BUILD_ROOT/usr/lib/systemd/system/wgui.path<<EOF
[Unit]
Description=Watch /etc/wireguard/wg0.conf for changes

[Path]
PathModified=/etc/wireguard/wg0.conf

[Install]
WantedBy=multi-user.target
EOF

cat >$RPM_BUILD_ROOT/usr/lib/systemd/system/socket-wireguard-ui.socket<<EOF
[Unit]
Description=Socket Activator for wireguard-ui

[Socket]
ListenStream=5000
Accept=no

[Install]
WantedBy=sockets.target
EOF

cat >$RPM_BUILD_ROOT/usr/lib/systemd/system/socket-wireguard-ui.service<<EOF
[Unit]
Requires=wireguard-ui.service
After=wireguard-ui.service
Requires=socket-wireguard-ui.socket
After=socket-wireguard-ui.socket
JoinsNamespaceOf=wireguard-ui.service

[Service]
Type=simple
ExecStart=/usr/lib/systemd/systemd-socket-proxyd --exit-idle-time=5m 127.0.0.1:5001
PrivateTmp=yes
PrivateNetwork=yes
EOF

cat >$RPM_BUILD_ROOT/usr/lib/systemd/system/wireguard-ui.service<<EOF
[Unit]
Description=WireGuard UI Service
After=network.target
StopWhenUnneeded=true

[Service]
Type=simple
WorkingDirectory=/etc/wireguard-ui
ExecStart=/usr/bin/wireguard-ui -bind-address 127.0.0.1:5001
ExecStop=/bin/kill -TERM \$MAINPID
Restart=on-failure
PrivateTmp=yes
PrivateNetwork=yes

[Install]
WantedBy=multi-user.target
EOF

install -d -m 0755 $RPM_BUILD_ROOT/etc/wireguard-ui/db
install -d -m 0755 $RPM_BUILD_ROOT/etc/wireguard-ui/db/{clients,server,users,wake_on_lan_hosts}
cat >$RPM_BUILD_ROOT/etc/wireguard-ui/db/server/hashes.json<<EOF
{
        "client": "none",
        "server": "none"
}
EOF

cat >$RPM_BUILD_ROOT/etc/wireguard-ui/db/server/interfaces.json<<EOF
{
        "addresses": [
                "10.21.22.1/24"
        ],
        "listen_port": "31194",
        "post_up": "",
        "pre_down": "",
        "post_down": ""
}
EOF

cat >$RPM_BUILD_ROOT/etc/wireguard-ui/db/users/admin.json<<EOF
{
        "username": "admin",
        "password": "",
        "password_hash": "JDJhJDE0JDJGMVJRQXc4VEVpMTNoakVXRjdYSGU5ZnV4WGdwanJ5T3FiTENSODB4TWQxSjRGUkNOY1N1",
        "admin": true
}
EOF

%preun
if [ "$1" = "0" ]; then
    %systemd_preun wgui.service wgui.path wireguard-ui.service socket-wireguard-ui.service socket-wireguard-ui.socket
fi

%postun
%systemd_postun_with_restart socket-wireguard-ui.socket
/usr/bin/rm -rf /etc/wireguard-ui/db/

#fresh install only
%post
if [ "$1" -eq 1 ]; then
    [[ ! -f "/etc/wireguard-ui/db/server/global_settings.json" ]] && \
    cat >/etc/wireguard-ui/db/server/global_settings.json<<EOF
{
       "endpoint_address": "ddns.example.com",
        "dns_servers": [
                "1.1.1.1"
        ],
        "mtu": "1450",
        "persistent_keepalive": "15",
        "firewall_mark": "0xca6c",
        "table": "auto",
        "config_file_path": "/etc/wireguard/wg0.conf"
}
EOF

    [[ ! -f "/etc/wireguard-ui/db/server/keypair.json" ]] && \
    private_key=$(/usr/bin/wg genkey) && \
    public_key=$(echo "$private_key" | /usr/bin/wg pubkey) && \
    cat >/etc/wireguard-ui/db/server/keypair.json<<EOF
{
        "private_key": "$private_key",
        "public_key": "$public_key"
}
EOF
    %systemd_post wgui.service wgui.path wireguard-ui.service socket-wireguard-ui.service socket-wireguard-ui.socket
fi

%files
%attr(0755,root,root) /usr/bin/wireguard-ui
%dir /etc/wireguard-ui
%dir /etc/wireguard-ui/db/
%dir /etc/wireguard-ui/db/clients
%dir /etc/wireguard-ui/db/server
%dir /etc/wireguard-ui/db/users
%dir /etc/wireguard-ui/db/wake_on_lan_hosts
/usr/lib/systemd/system/wgui.service
/usr/lib/systemd/system/wgui.path
/usr/lib/systemd/system/wireguard-ui.service
/usr/lib/systemd/system/socket-wireguard-ui.service
/usr/lib/systemd/system/socket-wireguard-ui.socket
%config(noreplace) /etc/wireguard-ui/db/server/hashes.json
%config(noreplace) /etc/wireguard-ui/db/server/interfaces.json
%config(noreplace) /etc/wireguard-ui/db/users/admin.json