sebys-hosting-scripts/install-wings.sh

#!/usr/bin/env bash
set -euo pipefail

# Seby's Calagopus Wings Installer
# Safe for curl | bash usage

########################################
# helpers
########################################
TTY="/dev/tty"

say() { printf "\n\033[1m%s\033[0m\n" "$*"; }
warn() { printf "\n\033[33m[warn]\033[0m %s\n" "$*"; }
err() { printf "\n\033[31m[error]\033[0m %s\n" "$*"; }

have() { command -v "$1" >/dev/null 2>&1; }

need_tty() {
  if [[ ! -r "$TTY" || ! -w "$TTY" ]]; then
    err "No interactive TTY available."
    exit 1
  fi
}

prompt() {
  local msg="$1"
  local out
  printf "%s" "$msg" >"$TTY"
  IFS= read -r out <"$TTY"
  printf "%s" "$out"
}

confirm_default_no() {
  local msg="$1"
  local ans
  ans="$(prompt "$msg [y/N]: ")"
  [[ "${ans,,}" == "y" || "${ans,,}" == "yes" ]]
}

require_root_or_sudo() {
  if [[ "${EUID:-$(id -u)}" -ne 0 ]]; then
    if have sudo; then
      SUDO="sudo"
    else
      err "Root or sudo required."
      exit 1
    fi
  else
    SUDO=""
  fi
}

apt_install() {
  $SUDO apt-get update -y
  $SUDO apt-get install -y "$@"
}

########################################
# SSL config updater (runs AFTER config exists)
########################################
update_ssl_config() {
  local domain="$1"
  local cfg="/etc/pterodactyl/config.yml"
  local cert="/etc/letsencrypt/live/${domain}/fullchain.pem"
  local key="/etc/letsencrypt/live/${domain}/privkey.pem"

  if [[ ! -f "$cfg" ]]; then
    warn "Config not found at $cfg — skipping SSL update."
    return
  fi

  if [[ ! -f "$cert" || ! -f "$key" ]]; then
    warn "Cert files not found ($cert / $key) — skipping SSL update."
    return
  fi

  say "Updating SSL section in $cfg"
  $SUDO cp -a "$cfg" "${cfg}.bak"

  # Rewrites only the ssl: block keys (expects standard indentation)
  $SUDO awk -v cert="$cert" -v key="$key" '
    BEGIN { inssl=0 }
    {
      if ($0 ~ /^  ssl:[[:space:]]*$/) { inssl=1; print; next }
      if (inssl==1) {
        # leave ssl block when we hit the next top-level section (two spaces + non-space)
        if ($0 ~ /^  [^[:space:]]/ && $0 !~ /^  ssl:/) { inssl=0 }
        else if ($0 ~ /^    enabled:/) { print "    enabled: true"; next }
        else if ($0 ~ /^    cert:/)    { print "    cert: " cert; next }
        else if ($0 ~ /^    key:/)     { print "    key: " key; next }
      }
      print
    }
  ' "$cfg" | $SUDO tee "$cfg" >/dev/null

  say "SSL config updated. Backup saved to ${cfg}.bak"
}

########################################
# Start
########################################
need_tty
require_root_or_sudo

if ! have apt-get; then
  err "Only Debian/Ubuntu supported."
  exit 1
fi

say "Calagopus Wings Installer"

########################################
# Docker
########################################
if have docker; then
  say "Docker detected: $(docker --version || true)"
else
  warn "Docker not installed."
  if confirm_default_no "Install Docker?"; then
    apt_install ca-certificates curl
    curl -fsSL https://get.docker.com/ | CHANNEL=stable $SUDO bash
    say "Docker installed: $(docker --version || true)"
  else
    err "Docker required. Exiting."
    exit 1
  fi
fi

########################################
# Download Wings
########################################
say "Downloading Wings binary..."

ARCH="$(uname -m)"
case "$ARCH" in
  x86_64|amd64) WINGS_ARCH="x86_64" ;;
  aarch64|arm64) WINGS_ARCH="aarch64" ;;
  *)
    err "Unsupported architecture: $ARCH"
    exit 1
    ;;
esac

WINGS_URL="https://github.com/calagopus/wings/releases/latest/download/wings-rs-${WINGS_ARCH}-linux"
WINGS_BIN="/usr/local/bin/wings"

$SUDO curl -fL "$WINGS_URL" -o "$WINGS_BIN"
$SUDO chmod +x "$WINGS_BIN"

say "Wings installed to $WINGS_BIN"
"$WINGS_BIN" version || true

########################################
# Configure (creates /etc/pterodactyl/config.yml)
########################################
CONFIG_CREATED=false

if confirm_default_no "Run wings configure --join-data now? (recommended)"; then
  JOIN_DATA="$(prompt "Paste join-data string: ")"
  if [[ -n "$JOIN_DATA" ]]; then
    $SUDO mkdir -p /etc/pterodactyl
    $SUDO "$WINGS_BIN" configure --join-data "$JOIN_DATA"
    CONFIG_CREATED=true
  else
    warn "No join-data provided; skipping configure."
  fi
else
  warn "Skipping configure. SSL setup will be skipped because config.yml will not exist yet."
fi

########################################
# SSL (after config exists)
########################################
if $CONFIG_CREATED && confirm_default_no "Set up SSL with certbot now?"; then
  DOMAIN="$(prompt "Enter domain (e.g. node.example.com): ")"
  EMAIL="$(prompt "Enter email for Let's Encrypt renewal notices: ")"

  if [[ -n "$DOMAIN" && -n "$EMAIL" ]]; then
    say "Installing certbot..."
    apt_install certbot

    warn "Ports 80/443 must be open and not in use for standalone mode."

    $SUDO certbot certonly \
      --standalone \
      -d "$DOMAIN" \
      --non-interactive \
      --agree-tos \
      --email "$EMAIL" \
      --no-eff-email

    update_ssl_config "$DOMAIN"
  else
    warn "Domain/email missing. Skipping SSL."
  fi
fi

########################################
# Install Service
########################################
if confirm_default_no "Install as systemd service? (wings service-install)"; then
  $SUDO "$WINGS_BIN" service-install
  say "Service status:"
  $SUDO systemctl --no-pager status wings || true
fi

say "Installation complete."