#!/bin/bash

# Docker和GitHub通过WireGuard连接外网配置脚本
# 适用于使用WireGuard App的macOS系统
# 服务器位于美国，使用美国DNS

set -e

# 颜色定义
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m'

print_status() {
    echo -e "${BLUE}[INFO]${NC} $1"
}

print_success() {
    echo -e "${GREEN}[✓]${NC} $1"
}

print_error() {
    echo -e "${RED}[✗]${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}[!]${NC} $1"
}

# 检查WireGuard是否运行（通过WireGuard App）
check_wireguard() {
    print_status "检查WireGuard连接状态..."
    
    # 检查wg0接口是否存在
    if ifconfig wg0 &>/dev/null; then
        print_success "WireGuard接口wg0已连接"
        
        # 显示接口信息
        WG_IP=$(ifconfig wg0 | grep "inet " | awk '{print $2}')
        print_status "  隧道IP: $WG_IP"
        return 0
    else
        print_error "WireGuard接口wg0未找到"
        print_warning "请先在WireGuard App中激活隧道"
        return 1
    fi
}

# 配置Docker使用美国DNS
configure_docker() {
    print_status "配置Docker使用美国DNS..."
    
    # 检查Docker是否安装
    if ! command -v docker &>/dev/null; then
        print_warning "Docker未安装，跳过Docker配置"
        return 0
    fi
    
    # 创建Docker daemon配置目录
    DOCKER_CONFIG_DIR="$HOME/.docker"
    mkdir -p "$DOCKER_CONFIG_DIR"
    
    DAEMON_JSON="$DOCKER_CONFIG_DIR/daemon.json"
    
    # 备份现有配置
    if [ -f "$DAEMON_JSON" ]; then
        cp "$DAEMON_JSON" "${DAEMON_JSON}.backup.$(date +%Y%m%d_%H%M%S)"
        print_status "已备份现有配置到 ${DAEMON_JSON}.backup"
    fi
    
    # 创建新配置 - 使用美国DNS
    cat > "$DAEMON_JSON" << 'DOCKEREOF'
{
  "dns": ["1.1.1.1", "8.8.8.8", "8.8.4.4"],
  "registry-mirrors": [],
  "insecure-registries": [],
  "debug": false,
  "experimental": false
}
DOCKEREOF
    
    print_success "Docker配置已更新（使用美国DNS: 1.1.1.1, 8.8.8.8）"
    print_warning "请重启Docker Desktop使配置生效"
    print_status "  方法1: 点击菜单栏Docker图标 -> Restart"
    print_status "  方法2: 使用命令重启"
    
    echo ""
}

# 配置Git优化
configure_git() {
    print_status "配置Git访问优化..."
    
    # Git全局配置
    git config --global http.postBuffer 524288000
    git config --global http.version HTTP/1.1
    git config --global core.compression 0
    
    print_success "Git配置已优化"
    print_status "  - postBuffer: 500MB"
    print_status "  - HTTP版本: 1.1"
    print_status "  - 压缩: 关闭（提高速度）"
    
    echo ""
}

# 配置SSH for GitHub
configure_ssh() {
    print_status "配置SSH for GitHub..."
    
    SSH_CONFIG="$HOME/.ssh/config"
    mkdir -p "$HOME/.ssh"
    chmod 700 "$HOME/.ssh"
    
    # 备份SSH配置
    if [ -f "$SSH_CONFIG" ]; then
        cp "$SSH_CONFIG" "${SSH_CONFIG}.backup.$(date +%Y%m%d_%H%M%S)"
        print_status "已备份SSH配置"
    fi
    
    # 检查是否已有GitHub配置
    if grep -q "Host github.com" "$SSH_CONFIG" 2>/dev/null; then
        print_status "GitHub SSH配置已存在，跳过"
    else
        cat >> "$SSH_CONFIG" << 'SSHEOF'

# GitHub配置（通过美国WireGuard服务器）
Host github.com
    Hostname github.com
    User git
    IdentityFile ~/.ssh/id_rsa
    ServerAliveInterval 60
    ServerAliveCountMax 10
    TCPKeepAlive yes
    Compression yes
    IPQoS throughput

Host *.github.com
    User git
    ServerAliveInterval 60
    ServerAliveCountMax 10
    TCPKeepAlive yes
    Compression yes
    IPQoS throughput

SSHEOF
        print_success "已添加GitHub SSH配置"
    fi
    
    chmod 600 "$SSH_CONFIG"
    echo ""
}

# 设置shell环境变量
configure_shell_env() {
    print_status "配置shell环境变量..."
    
    SHELL_RC=""
    if [ -n "$ZSH_VERSION" ]; then
        SHELL_RC="$HOME/.zshrc"
    elif [ -n "$BASH_VERSION" ]; then
        SHELL_RC="$HOME/.bashrc"
    else
        # 默认使用zsh（macOS默认）
        SHELL_RC="$HOME/.zshrc"
    fi
    
    if [ -n "$SHELL_RC" ]; then
        # 检查是否已存在配置
        if ! grep -q "# WireGuard Docker/GitHub Env" "$SHELL_RC" 2>/dev/null; then
            cat >> "$SHELL_RC" << 'ENVEOF'

# WireGuard Docker/GitHub Env (美国服务器)
export DOCKER_BUILDKIT=1
export COMPOSE_DOCKER_CLI_BUILD=1
# 禁用Git凭证助手超时（提高稳定性）
export GIT_CURL_VERBOSE=0
export GIT_TRACE=0

ENVEOF
            print_success "已添加环境变量到 $SHELL_RC"
            print_warning "请运行以下命令使配置生效: source $SHELL_RC"
        else
            print_status "环境变量配置已存在，跳过"
        fi
    fi
    
    echo ""
}

# 测试连接
test_connectivity() {
    print_status "测试基本连接..."
    
    # 测试出口IP
    print_status "检测出口IP..."
    EXIT_IP=$(curl -s --max-time 10 https://api.ipify.org 2>/dev/null || echo "检测失败")
    if [ "$EXIT_IP" != "检测失败" ]; then
        print_success "出口IP: $EXIT_IP"
        
        # 检测位置
        LOCATION=$(curl -s --max-time 10 "https://ipapi.co/$EXIT_IP/json/" 2>/dev/null | python3 -c "import sys, json; print(json.load(sys.stdin).get('country_name', '未知'))" 2>/dev/null || echo "未知")
        print_status "位置: $LOCATION"
    else
        print_error "无法检测出口IP"
    fi
    
    echo ""
    
}

# 测试GitHub连接
test_github() {
    print_status "测试GitHub连接..."
    
    # 测试HTTPS
    print_status "测试GitHub HTTPS连接..."
    if curl -I -s --connect-timeout 10 https://github.com | head -1 | grep -q "200\|301\|302"; then
        print_success "GitHub HTTPS连接正常"
    else
        print_warning "GitHub HTTPS连接失败"
    fi
    
    # 测试SSH
    print_status "测试GitHub SSH连接..."
    if timeout 10 ssh -T git@github.com 2>&1 | grep -q "successfully authenticated"; then
        print_success "GitHub SSH连接正常"
    else
        print_warning "GitHub SSH连接测试失败（这可能是正常的，如果未配置SSH密钥）"
    fi
    
    # 测试Git克隆
    print_status "测试Git克隆速度..."
    TMP_DIR="/tmp/git_test_$$"
    if timeout 30 git clone --depth 1 https://github.com/github/gitignore.git "$TMP_DIR" &>/dev/null; then
        print_success "Git克隆成功"
        rm -rf "$TMP_DIR"
    else
        print_warning "Git克隆超时或失败"
        rm -rf "$TMP_DIR" 2>/dev/null || true
    fi
}

# 主函数
main() {
    echo "=================================================="
    echo "  Docker和GitHub WireGuard配置脚本"
    echo "=================================================="
    echo ""
    
    check_sudo
    
    if ! check_wireguard; then
        exit 1
    fi
    
    echo ""
    print_status "开始配置..."
    echo ""
    
    # 配置Docker
    configure_docker
    echo ""
    
    # 配置GitHub
    configure_github
    echo ""
    
    # 运行测试
    print_status "运行连接测试..."
    echo ""
    test_github
    echo ""
    test_docker
    
    echo ""
    echo "=================================================="
    print_success "配置完成！"
    echo "=================================================="
    echo ""
    print_status "后续步骤："
    echo "  1. 重启Docker Desktop（如果使用）"
    echo "  2. 运行以下命令测试："
    echo "     - docker pull alpine:latest"
    echo "     - git clone https://github.com/github/gitignore.git"
    echo "  3. 如果遇到问题，运行: ./check-tunnel.sh"
    echo ""
}

main "$@"