#!/usr/bin/env bash
# 生成 Reality 与 Hysteria2 所需密钥，输出到 stdout 并写入 .env
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ROOT_DIR="$(dirname "$SCRIPT_DIR")"
ENV_FILE="${ROOT_DIR}/.env"

# 依赖 sing-box 生成 reality 密钥对
if ! command -v sing-box &>/dev/null; then
  echo "sing-box 未安装，使用临时下载..." >&2
  TMP="$(mktemp -d)"
  ARCH="$(uname -m)"
  case "$ARCH" in
    x86_64)  SB_ARCH="amd64" ;;
    aarch64) SB_ARCH="arm64" ;;
    *) echo "不支持的架构: $ARCH" >&2; exit 1 ;;
  esac
  curl -fsSL "https://github.com/SagerNet/sing-box/releases/latest/download/sing-box-1.11.0-linux-${SB_ARCH}.tar.gz" \
    | tar -xz -C "$TMP" --strip-components=1
  SB="$TMP/sing-box"
else
  SB="sing-box"
fi

UUID="$("$SB" generate uuid)"
KEYPAIR="$("$SB" generate reality-keypair)"
PRIVATE_KEY="$(echo "$KEYPAIR" | grep 'PrivateKey:' | awk '{print $2}')"
PUBLIC_KEY="$(echo "$KEYPAIR" | grep 'PublicKey:' | awk '{print $2}')"
SHORT_ID="$("$SB" generate rand --hex 8)"
HY2_PASSWORD="$("$SB" generate rand --base64 32 | tr -d '/+=' | head -c 24)"

echo "========== 生成的密钥 =========="
echo "UUID:              $UUID"
echo "REALITY_PRIVATE_KEY: $PRIVATE_KEY"
echo "REALITY_PUBLIC_KEY:  $PUBLIC_KEY"
echo "REALITY_SHORT_ID:    $SHORT_ID"
echo "HY2_PASSWORD:        $HY2_PASSWORD"
echo "================================"

if [[ -f "$ENV_FILE" ]]; then
  # 更新或追加 .env 中的密钥字段
  for var in UUID REALITY_PRIVATE_KEY REALITY_PUBLIC_KEY REALITY_SHORT_ID HY2_PASSWORD; do
    val="${!var}"
    if grep -q "^${var}=" "$ENV_FILE" 2>/dev/null; then
      sed -i "s|^${var}=.*|${var}=${val}|" "$ENV_FILE"
    else
      echo "${var}=${val}" >> "$ENV_FILE"
    fi
  done
  echo "已写入 $ENV_FILE"
else
  echo "提示: 先复制 .env.example 为 .env 并填写 VPS_IP、DOMAIN 等，再重新运行本脚本" >&2
fi