# Mastodon: web (puma) and sidekiq from one image, on the shared Postgres and Redis. Streaming is not needed.
MASTODON_IMAGE=ghcr.io/mastodon/mastodon:v4.7.3
. "$here/peers/shared.sh"

mastodon_env() {
	cat <<ENV
LOCAL_DOMAIN=mastodon.test
RAILS_ENV=production
NODE_ENV=production
DB_HOST=postgres
DB_USER=pasture
DB_PASS=pasture
DB_NAME=mastodon
REDIS_URL=redis://redis:6379/1
SECRET_KEY_BASE=pasture0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
OTP_SECRET=pasture000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=pasturedeterministickey0000000000
ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=pasturederivationsalt000000000000
ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=pastureprimarykey0000000000000000
ALLOWED_PRIVATE_ADDRESSES=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
SSL_CERT_FILE=/pasture/ca/bundle.pem
SKIP_POST_DEPLOYMENT_MIGRATIONS=false
WEB_CONCURRENCY=0
MAX_THREADS=8
RAILS_LOG_LEVEL=warn
${MASTODON_EXTRA_ENV:-}
ENV
}

mastodon_up() {
	shared_postgres_up
	shared_redis_up
	mastodon_env > "$here/.ca/mastodon.env"
	local common=(--network $net --env-file "$here/.ca/mastodon.env" -v "$ca:/pasture/ca:z,ro")
	podman run --rm "${common[@]}" -e SAFETY_ASSURED=1 $MASTODON_IMAGE bundle exec rails db:prepare >/dev/null
	podman run -d --replace --name pasture-mastodon "${common[@]}" -p 127.0.0.1:6973:3000 $MASTODON_IMAGE bundle exec puma -C config/puma.rb >/dev/null
	podman run -d --replace --name pasture-mastodon-sidekiq "${common[@]}" $MASTODON_IMAGE bundle exec sidekiq >/dev/null
	wait_http http://127.0.0.1:6973/health 90
	podman exec pasture-mastodon bin/tootctl accounts create mastouser --email mastouser@mastodon.test --confirmed --role Owner >/dev/null 2>&1 || true
	podman exec pasture-mastodon bin/tootctl accounts approve mastouser >/dev/null 2>&1 || true
	echo "mastodon: https://mastodon.test:6443"
}

# mastodon_token [user]: a token for a Mastodon user, made directly (Mastodon offers no password grant). Owners get
# admin:read too, for reading reports.
mastodon_token() {
	podman exec pasture-mastodon bin/rails runner '
app = Doorkeeper::Application.find_or_create_by!(name: "pasture") { |a| a.redirect_uri = "urn:ietf:wg:oauth:2.0:oob"; a.scopes = "read write follow admin:read" }
user = Account.find_local("'"${1:-mastouser}"'").user
puts Doorkeeper::AccessToken.create!(application_id: app.id, resource_owner_id: user.id, scopes: "read write follow admin:read").token' 2>/dev/null | tail -1
}

mastodon_user() { # name
	podman exec pasture-mastodon bin/tootctl accounts create "$1" --email "$1@mastodon.test" --confirmed >/dev/null 2>&1 || true
	podman exec pasture-mastodon bin/tootctl accounts approve "$1" >/dev/null 2>&1 || true
}