#!/bin/bash
# apply_config.sh
# Régénère les configs Postfix/Dovecot/Samba depuis les valeurs en BDD et recharge les services

set -e

PHP=/usr/bin/php

# Récupère les valeurs depuis la BDD via PHP
DOMAIN=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('domain');")
HOSTNAME=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('hostname');")
SMTP_PORT=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('smtp_port');")
SUBM_PORT=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('submission_port');")
IMAP_PORT=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('imap_port');")
IMAPS_PORT=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('imaps_port');")
WORKGROUP=$($PHP -r "require '/opt/copymail/web/includes/db.php'; echo cfg('smb_workgroup');")

# --- Postfix main.cf ---
cat > /etc/postfix/main.cf << POSTFIX
# CopyMail - généré automatiquement
myhostname = ${HOSTNAME}.${DOMAIN}
mydomain = ${DOMAIN}
myorigin = \$mydomain
inet_interfaces = all
inet_protocols = ipv4
mydestination = localhost
mynetworks = 127.0.0.0/8

# Virtual mailboxes
virtual_mailbox_domains = ${DOMAIN}
virtual_mailbox_base = /var/mail/vhosts
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

smtpd_banner = \$myhostname ESMTP
biff = no
append_dot_mydomain = no
readme_directory = no

# Taille max message: 50 Mo
message_size_limit = 52428800
POSTFIX

# --- Postfix master.cf (ports) ---
cat > /etc/postfix/master.cf << MASTER
smtp      inet  n  -  y  -  -  smtpd
${SUBM_PORT}    inet  n  -  y  -  -  smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
pickup    unix  n  -  y  60  1  pickup
cleanup   unix  n  -  y  -  0  cleanup
qmgr      unix  n  -  n  300 1  qmgr
tlsmgr    unix  -  -  y  1000? 1  tlsmgr
rewrite   unix  -  -  y  -  -  trivial-rewrite
bounce    unix  -  -  y  -  0  bounce
defer     unix  -  -  y  -  0  bounce
trace     unix  -  -  y  -  0  bounce
verify    unix  -  -  y  -  1  verify
flush     unix  n  -  y  1000? 0  flush
proxymap  unix  -  -  n  -  -  proxymap
proxywrite unix -  -  n  -  1  proxymap
smtp      unix  -  -  y  -  -  smtp
relay     unix  -  -  y  -  -  smtp
showq     unix  n  -  y  -  -  showq
error     unix  -  -  y  -  -  error
retry     unix  -  -  y  -  -  error
discard   unix  -  -  y  -  -  discard
local     unix  -  n  n  -  -  local
virtual   unix  -  n  n  -  -  virtual
lmtp      unix  -  -  y  -  -  lmtp
anvil     unix  -  -  y  -  1  anvil
scache    unix  -  -  y  -  1  scache
MASTER

# --- Dovecot ---
cat > /etc/dovecot/conf.d/10-mail.conf << DOVECOT
mail_location = maildir:/var/mail/vhosts/%d/%n/Maildir
mail_privileged_group = vmail
DOVECOT

cat > /etc/dovecot/conf.d/10-auth.conf << DOVECOTAUTH
auth_mechanisms = plain login
!include auth-passwdfile.conf.ext
DOVECOTAUTH

cat > /etc/dovecot/conf.d/auth-passwdfile.conf.ext << PASSFILE
passdb {
  driver = passwd-file
  args = scheme=SHA512-CRYPT /etc/dovecot/users
}
userdb {
  driver = static
  args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
}
PASSFILE

cat > /etc/dovecot/conf.d/10-master.conf << DOVMASTER
service imap-login {
  inet_listener imap {
    port = ${IMAP_PORT}
  }
  inet_listener imaps {
    port = ${IMAPS_PORT}
    ssl = yes
  }
}
service auth {
  unix_listener auth-userdb {
    mode = 0600
    user = vmail
  }
}
DOVMASTER

# --- Samba workgroup ---
sed -i "s/^\s*workgroup\s*=.*/   workgroup = ${WORKGROUP}/" /etc/samba/smb.conf

# --- Rechargement ---
systemctl reload postfix  || systemctl restart postfix
systemctl reload dovecot  || systemctl restart dovecot
systemctl reload smbd     || systemctl restart smbd

echo "OK: configuration appliquée pour ${DOMAIN}"