#!/bin/bash
set -e

echo "=== Starting MariaDB ==="
# Start MariaDB in background
mysqld --user=mysql &
MYSQL_PID=$!

# Wait for MariaDB to be ready
echo "Waiting for MariaDB to be ready..."
for i in {1..60}; do
    if mysqladmin ping -h localhost --silent 2>/dev/null; then
        echo "MariaDB is ready!"
        break
    fi
    sleep 1
done

# Create database if it doesn't exist
echo "Creating database if not exists..."
DB_NAME="${DB_NAME:-hospital}"
mysql -h localhost -u root -e "CREATE DATABASE IF NOT EXISTS \`$DB_NAME\`;"

# Create user and grant permissions if DB_PASSWORD is set
if [ -n "$DB_PASSWORD" ] && [ "$DB_PASSWORD" != "" ]; then
    echo "Creating user and setting permissions..."
    DB_USER="${DB_USER:-hospital}"
    
    # Check if user exists
    USER_EXISTS=$(mysql -h localhost -u root -N -e "SELECT COUNT(*) FROM mysql.user WHERE User='$DB_USER' AND Host='%';")
    
    if [ "$USER_EXISTS" = "0" ]; then
        mysql -h localhost -u root -e "CREATE USER '$DB_USER'@'%' IDENTIFIED BY '$DB_PASSWORD';"
        mysql -h localhost -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'%';"
        mysql -h localhost -u root -e "FLUSH PRIVILEGES;"
    else
        echo "User already exists, updating password..."
        mysql -h localhost -u root -e "ALTER USER '$DB_USER'@'%' IDENTIFIED BY '$DB_PASSWORD';"
        mysql -h localhost -u root -e "GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'%';"
        mysql -h localhost -u root -e "FLUSH PRIVILEGES;"
    fi
fi

echo "=== MariaDB initialization complete ==="

# If called with nginx.sh, start nginx
if [ "$1" = "nginx.sh" ]; then
    echo "Starting nginx..."
    nginx
    shift
    exec "$@"
fi

# Create initial admin user if not exists
ADMIN_DNI="${ADMIN_DNI:-00000000}"
ADMIN_PASSWORD="${ADMIN_PASSWORD:-Admin123!}"

echo "Checking for admin user..."
TABLE_EXISTS=$(mysql -h localhost -u "$DB_USER" -p"$DB_PASSWORD" "$DB_NAME" -N -e "SHOW TABLES LIKE 'usuarios';" 2>/dev/null || echo "")

if [ -n "$TABLE_EXISTS" ]; then
    USER_COUNT=$(mysql -h localhost -u "$DB_USER" -p"$DB_PASSWORD" "$DB_NAME" -N -e "SELECT COUNT(*) FROM usuarios WHERE dni='$ADMIN_DNI';" 2>/dev/null || echo "0")
    
    if [ "$USER_COUNT" = "0" ]; then
        echo "Creating initial admin user..."
        
        # Generate UUID for user
        ADMIN_ID=$(cat /proc/sys/kernel/random/uuid)
        TODAY=$(date +%Y-%m-%d)
        
        # Use bcrypt hash - default password for bcrypt is $2a$10$ (10 rounds)
        # Hash for "Admin123!" - this is a pre-computed hash, admin should change it
        BCRYPT_HASH='$2a$10$8kOhKfxFzN9YxJxGfJ5EwONz1JQJNKJqk1JqNKJqNKJqNKJqNKJqu'
        
        # Insert with a temp hash that won't work - we'll display the credentials to set manually
        mysql -h localhost -u "$DB_USER" -p"$DB_PASSWORD" "$DB_NAME" -e "
            INSERT INTO usuarios (id, apellido, nombre, dni, fechaNacimiento, email, rol, passwordHash, fechaCreacion)
            VALUES ('$ADMIN_ID', 'Administrador', 'Sistema', '$ADMIN_DNI', '$TODAY', 'admin@hospital.local', 'admin', '', '$TODAY');
        "
        
        echo "=========================================="
        echo "ADMIN CREDENTIALS (change password on first login):"
        echo "DNI: $ADMIN_DNI"
        echo "Password: $ADMIN_PASSWORD"
        echo "=========================================="
        
        # Now update with correct bcrypt hash
        node -e "
            const bcrypt = require('bcryptjs');
            const hash = bcrypt.hashSync('$ADMIN_PASSWORD', 10);
            console.log(hash);
        " > /tmp/hash.txt 2>/dev/null || true
        
        HASH=$(cat /tmp/hash.txt 2>/dev/null || echo "")
        if [ -n "$HASH" ]; then
            mysql -h localhost -u "$DB_USER" -p"$DB_PASSWORD" "$DB_NAME" -e "UPDATE usuarios SET passwordHash='$HASH' WHERE dni='$ADMIN_DNI';"
            echo "Admin user created with password hash."
        fi
    else
        echo "Admin user already exists, skipping creation."
    fi
fi

# Run the command passed to the container
exec "$@"