import type { Low } from 'lowdb';
import type { Database } from '../repositories/database';
import { ChartType } from '../repositories/system';
import { parseCidr } from 'cidr-tools';
import { stringifyIp } from 'ip-bigint';

export async function run1(db: Low<Database>) {
  const privateKey = await wg.generatePrivateKey();
  const publicKey = await wg.getPublicKey(privateKey);

  const address4Range = '10.8.0.0/24';
  const address6Range = 'fdcc:ad94:bacf:61a4::cafe:0/112';
  const cidr4 = parseCidr(address4Range);
  const cidr6 = parseCidr(address6Range);

  const database: Database = {
    migrations: [],
    setup: 1,
    system: {
      general: {
        sessionTimeout: 3600, // 1 hour
        lang: 'en',
      },
      // Config to configure Server
      interface: {
        privateKey: privateKey,
        publicKey: publicKey,
        address4: stringifyIp({ number: cidr4.start + 1n, version: 4 }),
        address6: stringifyIp({ number: cidr6.start + 1n, version: 6 }),
        mtu: 1420,
        port: 51820,
        device: 'eth0',
      },
      // Config to configure Peer & Client Config
      userConfig: {
        mtu: 1420,
        persistentKeepalive: 0,
        address4Range: address4Range,
        address6Range: address6Range,
        defaultDns: ['1.1.1.1', '2606:4700:4700::1111'],
        allowedIps: ['0.0.0.0/0', '::/0'],
        host: '',
        port: 51820,
      },
      // Config to configure Firewall
      iptables: {
        PreUp: '',
        PostUp: '',
        PreDown: '',
        PostDown: '',
      },
      features: {
        clientExpiration: {
          enabled: false,
        },
        oneTimeLinks: {
          enabled: false,
        },
        sortClients: {
          enabled: false,
        },
      },
      statistics: {
        enabled: false,
        chartType: ChartType.None,
      },
      metrics: {
        prometheus: {
          enabled: false,
          password: null,
        },
      },
      sessionConfig: {
        // TODO: be able to invalidate all sessions
        password: getRandomHex(256),
        name: 'wg-easy',
        cookie: {},
      },
    },
    users: [],
    clients: {},
  };

  database.system.iptables.PostUp =
    `iptables -t nat -A POSTROUTING -s ${database.system.userConfig.address4Range} -o ${database.system.interface.device} -j MASQUERADE;
iptables -A INPUT -p udp -m udp --dport ${database.system.interface.port} -j ACCEPT;
iptables -A FORWARD -i wg0 -j ACCEPT;
iptables -A FORWARD -o wg0 -j ACCEPT;
ip6tables -t nat -A POSTROUTING -s ${database.system.userConfig.address6Range} -o ${database.system.interface.device} -j MASQUERADE;
ip6tables -A INPUT -p udp -m udp --dport ${database.system.interface.port} -j ACCEPT;
ip6tables -A FORWARD -i wg0 -j ACCEPT;
ip6tables -A FORWARD -o wg0 -j ACCEPT;`
      .split('\n')
      .join(' ');

  database.system.iptables.PostDown =
    `iptables -t nat -D POSTROUTING -s ${database.system.userConfig.address4Range} -o ${database.system.interface.device} -j MASQUERADE;
iptables -D INPUT -p udp -m udp --dport ${database.system.interface.port} -j ACCEPT;
iptables -D FORWARD -i wg0 -j ACCEPT;
iptables -D FORWARD -o wg0 -j ACCEPT;
ip6tables -t nat -D POSTROUTING -s ${database.system.userConfig.address6Range} -o ${database.system.interface.device} -j MASQUERADE;
ip6tables -D INPUT -p udp -m udp --dport ${database.system.interface.port} -j ACCEPT;
ip6tables -D FORWARD -i wg0 -j ACCEPT;
ip6tables -D FORWARD -o wg0 -j ACCEPT;`
      .split('\n')
      .join(' ');

  db.data = database;
  db.write();
}