#!/usr/bin/env bash
set -euo pipefail
source ./lib.sh

NGINX_SITE="/etc/nginx/sites-available/${APP_USER}.conf"
NGINX_SITE_LINK="/etc/nginx/sites-enabled/${APP_USER}.conf"
TEMPLATE="$(cd .. && pwd)/config/nginx/site.conf.tmpl"

# Platzhalter für Template
export APP_DIR
export UI_SSL_DIR="/etc/ssl/ui"
export UI_CERT="${UI_SSL_DIR}/fullchain.pem"
export UI_KEY="${UI_SSL_DIR}/privkey.pem"
export NGINX_HTTP2_SUFFIX

# Template -> Site
log "Nginx konfigurieren…"
envsubst '$APP_DIR $UI_CERT $UI_KEY $NGINX_HTTP2_SUFFIX' < "$TEMPLATE" > "$NGINX_SITE"

ln -sf "$NGINX_SITE" "$NGINX_SITE_LINK"
if nginx -t; then
  systemctl enable --now nginx
  systemctl reload nginx || true
else
  die "Nginx-Konfiguration fehlerhaft – /var/log/nginx prüfen."
fi