#!/usr/bin/env bash
###############################################################################
# Email Configuration Script for Warren Scanner
# Configura Gmail SMTP relay per invio email automatiche
###############################################################################

set -e  # Exit on error

GMAIL_USER="maurof.gagliardi@gmail.com"
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

echo -e "${BLUE}=========================================="
echo "Warren Scanner - Email Setup"
echo -e "==========================================${NC}\n"

# Check if running with sudo
if [ "$EUID" -ne 0 ]; then
    echo -e "${RED}❌ Questo script richiede i privilegi di root${NC}"
    echo -e "${YELLOW}Esegui con: sudo ./setup_email.sh${NC}\n"
    exit 1
fi

echo -e "${BLUE}📧 Configurazione email per: $GMAIL_USER${NC}\n"

# Step 1: Install mailutils and dependencies
echo -e "${YELLOW}[1/6] Installazione mailutils e dipendenze...${NC}"
apt-get update -qq
DEBIAN_FRONTEND=noninteractive apt-get install -y mailutils postfix libsasl2-modules > /dev/null 2>&1
echo -e "${GREEN}✅ Pacchetti installati${NC}\n"

# Step 2: Request Gmail App Password
echo -e "${YELLOW}[2/6] Configurazione credenziali Gmail${NC}"
echo -e "${BLUE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
echo -e "Per inviare email tramite Gmail, devi generare una ${YELLOW}App Password${NC}"
echo ""
echo "Segui questi passi:"
echo "  1. Vai su https://myaccount.google.com/security"
echo "  2. Abilita '2-Step Verification' (se non già attivo)"
echo "  3. Vai su 'App passwords'"
echo "  4. Genera nuova password per 'Mail' su 'Linux Computer'"
echo "  5. Copia la password generata (16 caratteri senza spazi)"
echo ""
echo -e "${RED}⚠️  NON usare la tua password Gmail normale!${NC}"
echo -e "${BLUE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}\n"

read -sp "Incolla qui la Gmail App Password (16 caratteri): " GMAIL_APP_PASSWORD
echo ""

if [ -z "$GMAIL_APP_PASSWORD" ]; then
    echo -e "${RED}❌ Password non fornita. Setup annullato.${NC}"
    exit 1
fi

# Remove spaces if user copied with spaces
GMAIL_APP_PASSWORD=$(echo "$GMAIL_APP_PASSWORD" | tr -d ' ')

echo -e "${GREEN}✅ Password ricevuta${NC}\n"

# Step 3: Configure Postfix SASL credentials
echo -e "${YELLOW}[3/6] Configurazione credenziali SMTP...${NC}"
cat > /etc/postfix/sasl_passwd <<EOF
[smtp.gmail.com]:587 $GMAIL_USER:$GMAIL_APP_PASSWORD
EOF

chmod 600 /etc/postfix/sasl_passwd
postmap /etc/postfix/sasl_passwd
echo -e "${GREEN}✅ Credenziali configurate${NC}\n"

# Step 4: Backup existing Postfix configuration
echo -e "${YELLOW}[4/6] Backup configurazione Postfix...${NC}"
if [ -f /etc/postfix/main.cf ]; then
    cp /etc/postfix/main.cf /etc/postfix/main.cf.backup.$(date +%Y%m%d_%H%M%S)
    echo -e "${GREEN}✅ Backup salvato${NC}\n"
fi

# Step 5: Configure Postfix for Gmail relay
echo -e "${YELLOW}[5/6] Configurazione Postfix per Gmail relay...${NC}"

# Remove existing Gmail configuration if present
sed -i '/# Gmail SMTP Relay/,/smtp_tls_CAfile/d' /etc/postfix/main.cf

# Add Gmail relay configuration
cat >> /etc/postfix/main.cf <<EOF

# Gmail SMTP Relay - Added by Warren Scanner setup
relayhost = [smtp.gmail.com]:587
smtp_use_tls = yes
smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_session_cache_database = btree:\${data_directory}/smtp_scache
EOF

echo -e "${GREEN}✅ Postfix configurato${NC}\n"

# Step 6: Restart Postfix
echo -e "${YELLOW}[6/6] Riavvio Postfix...${NC}"
systemctl restart postfix
systemctl enable postfix > /dev/null 2>&1
echo -e "${GREEN}✅ Postfix riavviato${NC}\n"

# Test email configuration
echo -e "${BLUE}=========================================="
echo "🧪 Test Invio Email"
echo -e "==========================================${NC}\n"

TEST_SUBJECT="✅ Warren Scanner Email Setup Completato"
TEST_BODY="Configurazione email completata con successo!

Warren Scanner è ora configurato per inviare email automatiche a:
$GMAIL_USER

Test eseguito: $(date)
Sistema: $(hostname)

Riceverai una email ogni domenica alle 19:00 con:
• Riassunto risultati scansione
• Report HTML completo allegato
• Alert per upgrade di raccomandazione

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Questo è un test automatico. Non rispondere a questa email.
"

echo -e "${YELLOW}Invio email di test a $GMAIL_USER...${NC}"
echo "$TEST_BODY" | mail -s "$TEST_SUBJECT" "$GMAIL_USER"

if [ $? -eq 0 ]; then
    echo -e "${GREEN}✅ Email di test inviata!${NC}\n"
    echo -e "${BLUE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
    echo -e "${GREEN}Controlla la tua inbox: $GMAIL_USER${NC}"
    echo -e "${YELLOW}Nota: La prima email potrebbe finire in Spam/Junk${NC}"
    echo -e "${BLUE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}\n"
else
    echo -e "${RED}❌ Errore nell'invio email${NC}"
    echo -e "${YELLOW}Controlla i log: sudo tail -30 /var/log/mail.log${NC}\n"
    exit 1
fi

# Final summary
echo -e "${GREEN}=========================================="
echo "✅ Configurazione Completata!"
echo -e "==========================================${NC}\n"

echo "📊 Riepilogo configurazione:"
echo "  • Mail relay: Gmail SMTP (smtp.gmail.com:587)"
echo "  • Account Gmail: $GMAIL_USER"
echo "  • Postfix: Configurato e attivo"
echo "  • mailutils: Installato"
echo "  • Email di test: Inviata"
echo ""
echo "🔧 Comandi utili:"
echo "  • Test email: echo 'Test' | mail -s 'Test' $GMAIL_USER"
echo "  • Verifica log: sudo tail -f /var/log/mail.log"
echo "  • Status postfix: sudo systemctl status postfix"
echo "  • Test scanner: /mnt/ssd/data/python-lab/Trading/warren_scan_scheduler.sh"
echo ""
echo -e "${BLUE}📅 Prossima email automatica: Domenica prossima alle 19:00${NC}\n"

# Security reminder
echo -e "${YELLOW}⚠️  Sicurezza:${NC}"
echo "  Le credenziali Gmail sono salvate in: /etc/postfix/sasl_passwd"
echo "  Il file è protetto con permessi 600 (solo root)"
echo "  Non condividere mai la tua App Password!"
echo ""

exit 0