#!/bin/sh

#запрос конфигурации WARP
result=$(curl 'https://warp.llimonix.pw/api/warp' \
  -H 'Accept: */*' \
  -H 'Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7' \
  -H 'Connection: keep-alive' \
  -H 'Content-Type: application/json' \
  -H 'Origin: https://warp.llimonix.pw' \
  -H 'Referer: https://warp.llimonix.pw/' \
  -H 'Sec-Fetch-Dest: empty' \
  -H 'Sec-Fetch-Mode: cors' \
  -H 'Sec-Fetch-Site: same-origin' \
  -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36' \
  -H 'sec-ch-ua: "Not(A:Brand";v="99", "Google Chrome";v="133", "Chromium";v="133")' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'sec-ch-ua-platform: "Windows"' \
  --data-raw '{"selectedServices":[],"siteMode":"all","deviceType":"computer"}')

echo "opkg update"
opkg update

#проверяем установлени ли библиотека jq
test_json=$(echo "{ }" | jq)
if [ "$test_json" != "{}" ]; then
        echo "jq not installed"
        opkg install jq
fi

#проверяем установлени ли пакет dnsmasq-full
if opkg list-installed | grep -q dnsmasq-full; then
	echo "dnsmasq-full already installed"
else
	echo "Installed dnsmasq-full"
	cd /tmp/ && opkg download dnsmasq-full
	opkg remove dnsmasq && opkg install dnsmasq-full --cache /tmp/

	[ -f /etc/config/dhcp-opkg ] && cp /etc/config/dhcp /etc/config/dhcp-old && mv /etc/config/dhcp-opkg /etc/config/dhcp
fi

#проверяем установлени ли пакет coreutils-base64
if opkg list-installed | grep -q coreutils-base64; then
	echo "coreutils-base64 already installed"
else
	echo "Installed coreutils-base64"
	opkg install coreutils-base64
fi

#парсим результат запроса конфигурации WARP
content=$(echo $result | jq '.content')
configBase64=$(echo $content | jq -r '.configBase64')
#echo "$result"
warp_config=$(echo "$configBase64" | base64 -d)
#echo "$warp_config"
while IFS=' = ' read -r line; do
    if echo "$line" | grep -q "="; then
        # Разделяем строку по первому вхождению "="
        key=$(echo "$line" | cut -d'=' -f1 | xargs)  # Убираем пробелы
        value=$(echo "$line" | cut -d'=' -f2- | xargs)  # Убираем пробелы
        eval "$key=\"$value\""
	fi
done < <(echo "$warp_config")

#вытаскиваем нужные нам данные из распарсинного ответа
Address=$(echo "$Address" | cut -d',' -f1)
DNS=$(echo "$DNS" | cut -d',' -f1)
AllowedIPs=$(echo "$AllowedIPs" | cut -d',' -f1)
EndpointIP=$(echo "$Endpoint" | cut -d':' -f1)
EndpointPort=$(echo "$Endpoint" | cut -d':' -f2)

echo "Create and configure tunnel AmneziaWG WARP..."

#задаём имя интерфейса
INTERFACE_NAME="awg_route0"
CONFIG_NAME="amnezia_route0"
PROTO="amneziawg"
ZONE_NAME="awg"

uci set network.${INTERFACE_NAME}=interface
uci set network.${INTERFACE_NAME}.proto=$PROTO
uci set network.${INTERFACE_NAME}.private_key=$PrivateKey
uci set network.${INTERFACE_NAME}.listen_port='51821'
uci set network.${INTERFACE_NAME}.addresses=$Address
uci set network.${INTERFACE_NAME}.awg_jc=$Jc
uci set network.${INTERFACE_NAME}.awg_jmin=$Jmin
uci set network.${INTERFACE_NAME}.awg_jmax=$Jmax
uci set network.${INTERFACE_NAME}.awg_s1=$S1
uci set network.${INTERFACE_NAME}.awg_s2=$S2
uci set network.${INTERFACE_NAME}.awg_h1=$H1
uci set network.${INTERFACE_NAME}.awg_h2=$H2
uci set network.${INTERFACE_NAME}.awg_h3=$H3
uci set network.${INTERFACE_NAME}.awg_h4=$H4
uci set network.${INTERFACE_NAME}.mtu=$MTU

if ! uci show network | grep -q ${CONFIG_NAME}; then
	uci add network ${CONFIG_NAME}
	echo "add $INTERFACE_NAME"
fi

uci set network.@${CONFIG_NAME}[0]=$CONFIG_NAME
uci set network.@${CONFIG_NAME}[0].name="${INTERFACE_NAME}_client"
uci set network.@${CONFIG_NAME}[0].public_key=$PublicKey
uci set network.@${CONFIG_NAME}[0].route_allowed_ips='0'
uci set network.@${CONFIG_NAME}[0].persistent_keepalive='25'
uci set network.@${CONFIG_NAME}[0].endpoint_host=$EndpointIP
uci set network.@${CONFIG_NAME}[0].allowed_ips='0.0.0.0/0'
uci set network.@${CONFIG_NAME}[0].endpoint_port=$EndpointPort
uci commit network

if ! uci show firewall | grep -q "@zone.*name='${ZONE_NAME}'"; then
	printf "\033[32;1mZone Create\033[0m\n"
	uci add firewall zone
	uci set firewall.@zone[-1].name=$ZONE_NAME
	uci set firewall.@zone[-1].network=$INTERFACE_NAME
	uci set firewall.@zone[-1].forward='REJECT'
	uci set firewall.@zone[-1].output='ACCEPT'
	uci set firewall.@zone[-1].input='REJECT'
	uci set firewall.@zone[-1].masq='1'
	uci set firewall.@zone[-1].mtu_fix='1'
	uci set firewall.@zone[-1].family='ipv4'
	uci commit firewall
fi

if ! uci show firewall | grep -q "@forwarding.*name='${ZONE_NAME}'"; then
	printf "\033[32;1mConfigured forwarding\033[0m\n"
	uci add firewall forwarding
	uci set firewall.@forwarding[-1]=forwarding
	uci set firewall.@forwarding[-1].name="${ZONE_NAME}-lan"
	uci set firewall.@forwarding[-1].dest=${ZONE_NAME}
	uci set firewall.@forwarding[-1].src='lan'
	uci set firewall.@forwarding[-1].family='ipv4'
	uci commit firewall
fi


printf "\033[32;1mInstall and configure PODKOP (a tool for point routing of traffic)?? (y/n): \033[0m\n"
read is_install_podkop

if [ "$is_install_podkop" = "y" ] || [ "$is_install_podkop" = "Y" ]; then
    DOWNLOAD_DIR="/tmp/podkop"
	mkdir -p "$DOWNLOAD_DIR"
	REPO="https://api.github.com/repos/itdoginfo/podkop/releases/tags/v0.2.5"
	wget -qO- "$REPO" | grep -o 'https://[^"]*\.ipk' | while read -r url; do
		filename=$(basename "$url")
		echo "Download $filename..."
		wget -q -O "$DOWNLOAD_DIR/$filename" "$url"
	done
	opkg install $DOWNLOAD_DIR/podkop*.ipk
	opkg install $DOWNLOAD_DIR/luci-app-podkop*.ipk
	opkg install $DOWNLOAD_DIR/luci-i18n-podkop-ru*.ipk
	rm -f $DOWNLOAD_DIR/podkop*.ipk $DOWNLOAD_DIR/luci-app-podkop*.ipk $DOWNLOAD_DIR/luci-i18n-podkop-ru*.ipk

	uci set podkop.main.mode='vpn'
	uci set podkop.main.interface="$INTERFACE_NAME"
	uci set podkop.main.domain_list_enabled='1'
	uci set podkop.main.domain_list='ru_inside'
	uci set podkop.main.delist_domains_enabled='0'
	uci add_list podkop.main.subnets='meta'
	uci add_list podkop.main.subnets='twitter'
	uci add_list podkop.main.subnets='discord'
	uci commit podkop
fi


printf  "\033[32;1mStop and disabled service 'youtubeUnblock'...\033[0m\n"
service youtubeUnblock stop
service youtubeUnblock disable

printf  "Configured completed...\n\033[32;1mRestart network...\033[0m\n"
service firewall restart
service network restart