#!/bin/bash

#SETTINGS
passlen=22
emailforle=""

#FUNCTIONS
function applysettings {
  echo "Reading JSON manifest..."
  ipaddress=$( jq -r '.ipaddress' "$origpath/setupninja.json" )
  if [[ $ipaddress == "null" ]]; then
    getipaddress
  fi
  fqdn=$( jq -r '.fqdn' "$origpath/setupninja.json" )
  if [[ $fqdn == "null" ]]; then
    errorcheck 1 "Invalid JSON file" "EXIT"
  fi
  ishttps=$( jq -r '.ishttps' "$origpath/setupninja.json" )
  if [[ $ishttps == "null" ]]; then
    ishttps=true
  fi
  mysqlpass=$( jq -r '.mysqlpass' "$origpath/setupninja.json" )
  if [[ $mysqlpass == "null" ]]; then
    mysqlpass=$( generatepassword )
  fi
  appdbname=$( jq -r '.appdbname' "$origpath/setupninja.json" )
  if [[ $appdbname == "null" ]]; then
    appdbname=$( generatedbname )
  fi
  appdbuser=$( jq -r '.appdbuser' "$origpath/setupninja.json" )
  if [[ $appdbuser == "null" ]]; then
    appdbuser=$appdbname
  fi
  appdbpass=$( jq -r '.appdbpass' "$origpath/setupninja.json" )
  if [[ $appdbpass == "null" ]]; then
    appdbpass=$( generatepassword )
  fi
  mailhost=$( jq -r '.mailhost' "$origpath/setupninja.json" )
  if [[ $mailhost == "null" ]]; then
    errorcheck 1 "Invalid JSON file" "EXIT"
  fi
  mailssl=$( jq -r '.mailssl' "$origpath/setupninja.json" )
  if [[ $mailssl == "null" ]]; then
    mailssl=true
  fi
  mailport=$( jq -r '.mailport' "$origpath/setupninja.json" )
  if [[ $mailport == "null" ]]; then
    mailport="465"
  fi
  mailuser=$( jq -r '.mailuser' "$origpath/setupninja.json" )
  if [[ $mailuser == "null" ]]; then
    errorcheck 1 "Invalid JSON file" "EXIT"
  fi
  mailpass=$( jq -r '.mailpass' "$origpath/setupninja.json" )
  if [[ $mailpass == "null" ]]; then
    errorcheck 1 "Invalid JSON file" "EXIT"
  fi
  mailfrom=$( jq -r '.mailfrom' "$origpath/setupninja.json" )
  if [[ $mailfrom == "null" ]]; then
    mailfrom=$mailuser
  fi
  mailname=$( jq -r '.mailname' "$origpath/setupninja.json" )
  if [[ $mailname == "null" ]]; then
    errorcheck 1 "Invalid JSON file" "EXIT"
  fi
  echo
  buildjson
}

function buildjson {
  echo -n "{\"ipaddress\":\"$ipaddress\",\"fqdn\":\"$fqdn\",\"ishttps\":$ishttps,\"mysqlpass\":\"$mysqlpass\",\"appdbname\":\"$appdbname\",\"appdbuser\":\"$appdbuser\",\"appdbpass\":\"$appdbpass\",\"mailhost\":\"$mailhost\",\"mailssl\":$mailssl,\"mailport\":\"$mailport\",\"mailuser\":\"$mailuser\",\"mailpass\":\"$mailpass\",\"mailfrom\":\"$mailfrom\",\"mailname\":\"$mailname\"}" > "$origpath/setupninja.json"
}

function confapachephp {
  #CONFIGURE APACHE2 AND PHP
  echo "Configuring Apache2 and PHP-FPM..."
  systemctl stop apache2 > /dev/null 2>&1
  errorcheck $? "systemctl stop apache2" "EXIT"
  a2dismod php8.2 > /dev/null 2>&1
  errorcheck $? "a2dismod php8.2" "EXIT"
  a2dismod mpm_prefork > /dev/null 2>&1
  errorcheck $? "a2dismod mpm_prefork" "EXIT"
  a2enmod mpm_event proxy proxy_fcgi setenvif rewrite > /dev/null 2>&1
  errorcheck $? "a2enmod mpm_event proxy proxy_fcgi setenvif rewrite" "EXIT"
  a2enconf php8.2-fpm > /dev/null 2>&1
  errorcheck $? "a2enconf php8.2-fpm" "EXIT"
  systemctl restart apache2 > /dev/null 2>&1
  errorcheck $? "systemctl restart apache2" "EXIT"
  echo "8" > "$origpath/setupninja.step"
  echo
}

function confmariadb {
  #CONFIGURE MARIADB
  echo "Hardening MariaDB..."
  systemctl enable mariadb > /dev/null 2>&1
  errorcheck $? "systemctl enable mariadb" "EXIT"
  systemctl start mariadb > /dev/null 2>&1
  errorcheck $? "systemctl start mariadb" "EXIT"
  echo "UPDATE mysql.global_priv SET priv=json_set(priv, '$.password_last_changed', UNIX_TIMESTAMP(), '$.plugin', 'mysql_native_password', '$.authentication_string', 'invalid', '$.auth_or', json_array(json_object(), json_object('plugin', 'unix_socket'))) WHERE User='root';" | mysql
  errorcheck $? "UPDATE mysql.global_priv SET priv=json_set(priv, '$.password_last_changed', UNIX_TIMESTAMP(), '$.plugin', 'mysql_native_password', '$.authentication_string', 'invalid', '$.auth_or', json_array(json_object(), json_object('plugin', 'unix_socket'))) WHERE User='root';" "EXIT"
  echo "FLUSH PRIVILEGES;" | mysql
  errorcheck $? "FLUSH PRIVILEGES;" "EXIT"
  echo "UPDATE mysql.global_priv SET priv=json_set(priv, '$.plugin', 'mysql_native_password', '$.authentication_string', PASSWORD('basic_single_escape \"$mysqlpass\"')) WHERE User='root';" | mysql
  errorcheck $? "UPDATE mysql.global_priv SET priv=json_set(priv, '$.plugin', 'mysql_native_password', '$.authentication_string', PASSWORD('basic_single_escape \"$mysqlpass\"')) WHERE User='root';" "EXIT"
  echo "DELETE FROM mysql.global_priv WHERE User='';" | mysql
  errorcheck $? "DELETE FROM mysql.global_priv WHERE User='';" "EXIT"
  echo "DELETE FROM mysql.global_priv WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');" | mysql
  errorcheck $? "DELETE FROM mysql.global_priv WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');" "EXIT"
  echo "DROP DATABASE IF EXISTS test;" | mysql
  errorcheck $? "DROP DATABASE IF EXISTS test;" "EXIT"
  echo "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'" | mysql
  errorcheck $? "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'" "EXIT"
  echo "FLUSH PRIVILEGES;" | mysql
  errorcheck $? "FLUSH PRIVILEGES;" "EXIT"
  echo "9" > "$origpath/setupninja.step"
  echo
}

function confninja {
  #PRECONFIGURNG INVOICE NINJA
  echo "Creating .env file..."
  chown -R www-data:www-data /var/www/$appdbname > /dev/null 2>&1
  chmod -R 755 /var/www/$appdbname > /dev/null 2>&1
  cd /var/www/$appdbname
  if [[ -f .env ]]; then
    rm -f .env
  fi
  touch .env
  while read -r line; do
    if [[ ${line:0:7} == "APP_URL" ]]; then
      if [[ ishttps == true ]]; then
        echo "APP_URL=\"https://$fqdn/public\"" >> .env
      else
        echo "APP_URL=\"http://$fqdn/public\"" >> .env
      fi
    elif [[ ${line:0:11} == "DB_DATABASE" ]]; then
      echo "DB_DATABASE=\"$appdbname\"" >> .env
    elif [[ ${line:0:11} == "DB_USERNAME" ]]; then
      echo "DB_USERNAME=\"$appdbuser\"" >> .env
    elif [[ ${line:0:11} == "DB_PASSWORD" ]]; then
      echo "DB_PASSWORD=\"$appdbpass\"" >> .env
    elif [[ ${line:0:9} == "MAIL_HOST" ]]; then
      echo "MAIL_HOST=\"$mailhost\"" >> .env
    elif [[ ${line:0:9} == "MAIL_PORT" ]]; then
      echo "MAIL_HOST=\"$mailport\"" >> .env
    elif [[ ${line:0:13} == "MAIL_USERNAME" ]]; then
      echo "MAIL_USERNAME=\"$mailuser\"" >> .env
    elif [[ ${line:0:13} == "MAIL_PASSWORD" ]]; then
      echo "MAIL_PASSWORD=\"$mailpass\"" >> .env
    elif [[ ${line:0:17} == "MAIL_FROM_ADDRESS" ]]; then
      echo "MAIL_FROM_ADDRESS=\"$mailfrom\"" >> .env
    elif [[ ${line:0:14} == "MAIL_FROM_NAME" ]]; then
      echo "MAIL_FROM_NAME=\"$mailname\"" >> .env
    elif [[ ${line:0:15} == "MAIL_ENCRYPTION" ]]; then
      if [[ $mailssl == true ]]; then
        echo "MAIL_ENCRYPTION=\"ssl\"" >> .env
      else
        echo $line >> .env
      fi
    elif [[ ${line:0:11} == "REQUIRE_HTTPS" ]]; then
      if [[ ishttps == true ]]; then
        echo "REQUIRE_HTTPS=\"true\"" >> .env
      else
        echo "REQUIRE_HTTPS=\"false\"" >> .env
      fi
    else
      echo $line >> .env
    fi
  done < .env.example
  chown www-data:www-data .env > /dev/null 2>&1
  echo "13" > "$origpath/setupninja.step"
  echo
}

function downloadninja {
  #DOWNLOAD INVOICE NINJA
  if [[ -f "$origpath/invoiceninja.tar" ]]; then
    rm -f "$origpath/invoiceninja.tar"
  fi
  appversion=$(curl -s https://api.github.com/repos/invoiceninja/invoiceninja/releases/latest|grep tag_name|cut -d '"' -f 4|sed 's/v//')
  errorcheck $? "curl -s https://api.github.com/repos/invoiceninja/invoiceninja/releases/latest" "EXIT"
  echo "Downloading Invoice Ninja version $appversion..."
  wget -q "https://github.com/invoiceninja/invoiceninja/releases/download/v$appversion/invoiceninja.tar"
  errorcheck $? "wget -q "https://github.com/invoiceninja/invoiceninja/releases/download/v$appversion/invoiceninja.tar"" "EXIT"
  echo "11" > "$origpath/setupninja.step"
  echo
}

function errorcheck {
  if [[ $1 == 0 ]] || [[ -z $1 ]]; then
    echo "SUCCESS: $2" >> "$origpath/setupninja.log"
  else
    if [[ $3 == "EXIT" ]]; then
      echo "ERROR: $2 (EXIT CODE: $1)" >> "$origpath/setupninja.log"
      echo "Install Failed! View $origpath/setupninja.log"
      exit 1
    else
      echo "ERROR: $2" >> "$origpath/setupninja.log"
      echo "JSON: $3" >> "$origpath/setupninja.log"
      echo "Error with last step: Please check $origpath/setupninja.log"
      echo "Able to proceed..."
    fi
  fi
}

function gathersettings {
  #GATHER SETTINGS
  getipaddress
  echo "IP address is $ipaddress..."
  echo -n "What is the FQDN for the server? "
  read fqdn
  echo -n "Do you want to configure the system hostname the same as the FQDN? (y/n)"
  read reply
  if [[ $reply == "y" ]]; then
    sethost=true
  else
    sethost=false
  fi
  echo -n "Must an SLL certificate be used? (y/n)"
  read reply
  if [[ $reply == "y" ]]; then
    ishttps=true
  else
    ishttps=false
  fi
  echo -n "Enter a password for MariaDB root (blank for random password): "
  read mysqlpass
  if [[ $mysqlpass == "" ]]; then
    echo "Generating a random password..."
    mysqlpass=$( generatepassword )
  fi
  echo -n "Enter a name for the Invoice Ninja database (blank for 'ninja') "
  read appdbname
  if [[ $appdbname == "" ]]; then
    appdbname=$( generatedbname )
  fi
  echo -n "Enter a name for the Invoice Ninja database user (blank for same as database name) "
  read appdbuser
  if [[ $appdbuser == "" ]]; then
    appdbuser=$appdbname
  fi
  echo -n "Enter a password for Invoice Ninja database (blank for random password): "
  read appdbpass
  if [[ $appdbpass == "" ]]; then
    echo "Generating a random password..."
    appdbpass=$( generatepassword )
  fi
  echo -n "What is the FQDN for the mailserver? "
  read mailhost
  echo -n "Is the mailserver using SSL? (y/n) "
  read reply
  if [[ $reply == "y" ]]; then
    mailssl=true
  else
    mailssl=false
  fi
  echo -n "What is the port for the mailserver? (leave blank for 465) "
  read mailport
  if [[ $mailport == "" ]]; then
    mailport="465"
  fi
  echo -n "What is the username for the mailserver? "
  read mailuser
  echo -n "What is the password for the mailserver? "
  read mailpass
  echo -n "What is the from address for the mailserver? (leave blank if same as username) "
  read mailfrom
  if [[ $mailfrom == "" ]]; then
    mailfrom=$mailuser
  fi
  if [[ $emailforle == "" ]]; then
    emailforle=$mailfrom
  fi
  echo -n "What is the sender name for the mailserver? "
  read mailname
  echo
  buildjson
}

function generatedbname {
  dbcharacterset=('1' '2' '3' '4' '5' '6' '7' '8' '9' '0')
  temp="ninja"
  for ((n=0; n<5; n++)); do
    dbcharacterset=($(shuf -e ${dbcharacterset[@]}))
    name="$temp${dbcharacterset[0]}"
    temp=$name
  done
  echo $name
}

function generatepassword {
  passcharacterset=('A' 'B' 'C' 'D' 'E' 'F' 'G' 'H' 'I' 'J' 'K' 'L' 'M' 'N' 'O' 'P' 'Q' 'R' 'S' 'T' 'U' 'V' 'W' 'X' 'Y' 'Z' 'a' 'b' 'c' 'd' 'e' 'f' 'g' 'h' 'i' 'j' 'k' 'l' 'm' 'n' 'o' 'p' 'q' 'r' 's' 't' 'u' 'v' 'w' 'x' 'y' 'z' '1' '2' '3' '4' '5' '6' '7' '8' '9' '0')
  temp=""
  test=""
  for ((n=0; n<$passlen; n++)); do
    passcharacterset=($(shuf -e ${passcharacterset[@]}))
    if [[ $test == ${passcharacterset[0]} ]]; then
      pass="$temp${passcharacterset[1]}"
      test=${passcharacterset[1]}
    else
      pass="$temp${passcharacterset[0]}"
      test=${passcharacterset[0]}
    fi
    temp=$pass
  done
  echo $pass
}

function getipaddress {
  size=$( cat /proc/net/dev | wc -l )
  ((size++))
  for ((n=4; n<$size; n++)); do
    temp=($( cat /proc/net/dev | head -n $n | tail -1 ))
    netdev[$((n-4))]=${temp[0]}
  done
  size=${#netdev[@]}
  c=0
  for ((n=0; n<$size; n++)); do
    temp=$( ip a | grep ${netdev[$n]} | grep "state UP" )
    if [[ ! -z $temp ]]; then
      netdevup[$c]=${netdev[$n]}
      ((c++))
    fi
  done
  size=${#netdevup[@]}
  if [[ $size == 0 ]]; then
    errorcheck 1 "No interfaces are connected" "EXIT"
  elif [[ $size == 1 ]]; then
    ipaddress=$( ip -o -4 addr list ${netdevup[0]:0:-1} | awk '{print $4}' | cut -d/ -f1 )
  else
    echo "Available Interfaces..."
    for ((n=0; n<$size; n++)); do
      echo "$n ${netdevup[$n]:0:-1} $( ip -o -4 addr list ${netdevup[$n]:0:-1} | awk '{print $4}' | cut -d/ -f1 )"
    done
    echo -n "Which interface do you want to use? (choose 0-$((size-1)) | default is 0) "
    read reply
    if [[ $reply == "" ]]; then
      reply=0
    fi
    ipaddress=$( ip -o -4 addr list ${netdevup[$reply]:0:-1} | awk '{print $4}' | cut -d/ -f1 )
  fi
}

function goapache {
  #INSTALL APACHE2
  echo "Installing Apache2..."
  apt -y install apache2 > /dev/null 2>&1
  errorcheck $? "apt -y install apache2" "EXIT"
  echo "5" > "$origpath/setupninja.step"
  echo
}

function gocron {
  #SETUP CRONJOBS
  echo "Creating Cron Jobs..."
  echo "#Invoice Ninja Cron Jobs" >> /etc/crontab
  echo "0 6 * * * www-data /usr/bin/php /var/www/$appdbname/artisan ninja:send-recurring > /dev/null" >> /etc/crontab
  echo "0 6 * * * www-data /usr/bin/php /var/www/$appdbname/artisan ninja:send-reminders > /dev/null" >> /etc/crontab
  echo "* * * * * www-data /usr/bin/php /var/www/$appdbname/artisan schedule:run >> /dev/null 2>&1" >> /etc/crontab
  echo "17" > "$origpath/setupninja.step"
  echo
}

function gohousekeeping {
  #HOUSEKEEPING
  echo "Cleaning up around the house..."
  apt -y autoremove > /dev/null 2>&1
  apt -y clean > /dev/null 2>&1
  rm -f "$origpath/invoiceninja.tar" > /dev/null 2>&1
  rm -f "$origpath/setupninja.sh" > /dev/null 2>&1
  echo "19" > "$origpath/setupninja.step"
  echo
}

function gomariadb {
  #INSTALL MARIADB
  echo "Installing MariaDB..."
  apt -y install mariadb-server mariadb-client > /dev/null 2>&1
  errorcheck $? "apt -y install mariadb-server mariadb-client" "EXIT"
  echo "6" > "$origpath/setupninja.step"
  echo
}

function gophp {
  #INSTALL PHP
  echo "Install PHP8.2..."
  apt -y install php8.2-{fpm,soap,bcmath,common,imagick,mysql,gmp,curl,intl,mbstring,xmlrpc,gd,xml,cli,zip,bz2,fpm} libapache2-mod-php8.2 libapache2-mod-fcgid > /dev/null 2>&1
  errorcheck $? "apt -y install php8.2-{fpm,soap,bcmath,common,imagick,mysql,gmp,curl,intl,mbstring,xmlrpc,gd,xml,cli,zip,bz2,fpm} libapache2-mod-php8.2 libapache2-mod-fcgid" "EXIT"
  echo "7" > "$origpath/setupninja.step"
  echo
}

function goreport {
  #FINISHED
  cd $origpath
  echo "MariaDB root password: $mysqlpass" >> "setupninja.log"
  echo "Database: $appdbname" >> "setupninja.log"
  echo "Username: $appdbuser" >> "setupninja.log"
  echo "Password: $appdbpass" >> "setupninja.log"
  echo "URL: $fqdn/public" >> "setupninja.log"
  echo "Login: $mailfrom" >> "setupninja.log"
  echo "Password: $adminpass" >> "setupninja.log"
  echo "FINISHED!!!"
  echo "MariaDB root password: $mysqlpass"
  echo "Database: $appdbname"
  echo "Username: $appdbuser"
  echo "Password: $appdbpass"
  echo "URL: $fqdn/public"
  echo "Login: $mailfrom"
  echo "Password: $adminpass"
  echo "This is all saved in $origpath/setupninja.log"
  echo "18" > "$origpath/setupninja.step"
  echo
}

function gossl {
  #SETUP LET'S ENCRYPT SSL
  if [[ $ishttps == true ]]; then
    echo "Installing Let's Encrypt Certificate..."
    a2enmod ssl > /dev/null 2>&1
    errorcheck $? "a2enmod ssl > /dev/null" "EXIT"
    systemctl restart apache2 > /dev/null 2>&1
    errorcheck $? "systemctl restart apache2" "EXIT"
    apt -y install certbot python3-certbot-apache > /dev/null 2>&1
    errorcheck $? "apt -y install certbot python3-certbot-apache" "EXIT"
    certbot --apache -d $fqdn --agree-tos -m $emailforle --redirect > /dev/null 2>&1
    errorcheck $? "certbot --apache -d $fqdn --agree-tos -m $emailforle --redirect" "EXIT"
    echo "15" > "$origpath/setupninja.step"
    echo
  fi
}

function gostandard {
  #INSTALLING STANDING REQUIREMENTS
  echo "Installing packages to do install..."
  apt -y install jq extrepo curl screen rsync tar > /dev/null 2>&1
  errorcheck $? "apt -y install extrepo curl screen rsync tar" "EXIT"
  echo "3" > "$origpath/setupninja.step"
  echo
}

function gosury {
  #ENABLE SURY FOR PHP
  echo "Setting up Sury Repo for PHP..."
  extrepo enable sury > /dev/null 2>&1
  errorcheck $? "extrepo enable sury" "EXIT"
  apt -y update > /dev/null 2>&1
  errorcheck $? "apt -y update" "EXIT"
  echo "4" > "$origpath/setupninja.step"
  echo
}

function goweb {
  #INSTALL VIA WEB
  echo "Configuring Invoice Ninja via Web Interface..."
  mailnameforurl=$( echo $mailname | sed 's/ /+/g' )
  mailuserforurl=$( echo $mailuser | sed 's/@/%40/g' )
  mailfromforurl=$( echo $mailfrom | sed 's/@/%40/g' )
  if [[ $ishttps == true ]]; then
    temp=($( curl -s https://$fqdn/public/setup | grep "_token" ))
  else
    temp=($( curl -s http://$fqdn/public/setup | grep "_token" ))
  fi
  token=${temp[3]:7:-1}
  echo "Token: $token"
  echo "Generating password for admin account..."
  adminpass=$( generatepassword )
  echo -n "Test PDF: "
  if [[ $ishttps == true ]]; then
    testpdf=$( curl -s -X POST "https://$fqdn/public/setup/check_pdf" )
  else
    testpdf=$( curl -s -X POST "http://$fqdn/public/setup/check_pdf" )
  fi
  if [[ $testpdf == '{"url":""}' ]]; then
    echo "Successful!"
    errorcheck 0 "Test PDF Creation" "SUCCESS"
  else
    echo "ERROR!"
    errorcheck 1 "Test PDF Creation" "$testpdf"
  fi
  echo -n "Test DB: "
  if [[ $ishttps == true ]]; then
    testdb=$( curl -s -X POST "https://$fqdn/public/setup/check_db" -H "Content-Type: application/json" -d "{\"db_host\":\"localhost\",\"db_port\":\"3306\",\"db_database\":\"$appdbname\",\"db_username\":\"$appdbuser\",\"db_password\":\"$appdbpass\"}" )
  else
    testdb=$( curl -s -X POST "http://$fqdn/public/setup/check_db" -H "Content-Type: application/json" -d "{\"db_host\":\"localhost\",\"db_port\":\"3306\",\"db_database\":\"$appdbname\",\"db_username\":\"$appdbuser\",\"db_password\":\"$appdbpass\"}" )
  fi
  if [[ $testdb == '[]' ]]; then
    echo "Successful!"
    errorcheck 0 "Test DB Settings" "SUCCESS"
  else
    echo "ERROR!"
    errorcheck 1 "Test DB Settings" "$testdb"
  fi
  echo -n "Test Mail: "
  if [[ $ishttps == true ]]; then
    testmail=$( curl -s -X POST "https://$fqdn/public/setup/check_mail" -H "Content-Type: application/json" -d "{\"mail_driver\":\"smtp\",\"mail_name\":\"$mailname\",\"mail_address\":\"$mailfrom\",\"mail_username\":\"$mailuser\",\"mail_host\":\"$mailhost\",\"mail_port\":\"$mailport\",\"encryption\":\"ssl\",\"mail_password\":\"$mailpass\"}" )
  else
    testmail=$( curl -s -X POST "http://$fqdn/public/setup/check_mail" -H "Content-Type: application/json" -d "{\"mail_driver\":\"smtp\",\"mail_name\":\"$mailname\",\"mail_address\":\"$mailfrom\",\"mail_username\":\"$mailuser\",\"mail_host\":\"$mailhost\",\"mail_port\":\"$mailport\",\"encryption\":\"ssl\",\"mail_password\":\"$mailpass\"}" )
  fi
  if [[ $testmail == '[]' ]]; then
    echo "Successful!"
    errorcheck 0 "Test Email Settings" "SUCCESS"
  else
    echo "ERROR!"
    errorcheck 1 "Test Email Settings" "$testmail"
  fi
  echo "Submit Everything"
  if [[ $ishttps == true ]]; then
    testsubmit=$( curl -s -X POST "https://$fqdn/public/setup" -H "Content-Type: application/x-www-form-urlencoded" -d "_token=$token&url=http%3A%2F%2F$fqdn%2Fpublic&db_driver=MySQL&db_host=localhost&db_port=3306&db_database=$appdbname&db_username=$appdbuser&db_password=$appdbpass&mail_driver=smtp&mail_name=$mailnameforurl&mail_address=$mailfromforurl&mail_username=$mailuserforurl&mail_host=$mailhost&mail_port=$mailport&encryption=ssl&mail_password=$mailpass&first_name=System&last_name=Admin&email=$mailfromforurl&password=$adminpass&terms_of_service=on&privacy_policy=on"  )
  else
    testsubmit=$( curl -s -X POST "http://$fqdn/public/setup" -H "Content-Type: application/x-www-form-urlencoded" -d "_token=$token&url=http%3A%2F%2F$fqdn%2Fpublic&db_driver=MySQL&db_host=localhost&db_port=3306&db_database=$appdbname&db_username=$appdbuser&db_password=$appdbpass&mail_driver=smtp&mail_name=$mailnameforurl&mail_address=$mailfromforurl&mail_username=$mailuserforurl&mail_host=$mailhost&mail_port=$mailport&encryption=ssl&mail_password=$mailpass&first_name=System&last_name=Admin&email=$mailfromforurl&password=$adminpass&terms_of_service=on&privacy_policy=on"  )
  fi
  echo "16" > "$origpath/setupninja.step"
  echo
}

function initsetup {
  #INITIAL SETUP
  echo "Updating System..."
  apt -y update > /dev/null 2>&1
  errorcheck $? "apt -y update" "EXIT"
  apt -y upgrade > /dev/null 2>&1
  errorcheck $? "apt -y upgrade" "EXIT"
  echo "2" > "$origpath/setupninja.step"
  echo
}

function ninjadb {
  #SETUP DATABASE FOR NINJA
  echo "Setting up database for Invoice Ninja..."
  echo "CREATE DATABASE $appdbname; CREATE USER $appdbuser@localhost IDENTIFIED BY '$appdbpass'; GRANT ALL PRIVILEGES ON $appdbname.* TO $appdbuser@localhost; FLUSH PRIVILEGES;" | mysql
  errorcheck $? "CREATE DATABASE $appdbname; CREATE USER $appdbuser@localhost IDENTIFIED BY '$appdbpass'; GRANT ALL PRIVILEGES ON $appdbname.* TO $appdbuser@localhost; FLUSH PRIVILEGES;" "EXIT"
  echo "10" > "$origpath/setupninja.step"
  echo
}

function sethostname {
  #SETTING UP HOSTNAME
  if [[ $sethost == true ]]; then
    echo "Setting up hostname..."
    hostnamectl set-hostname ${fqdn%%.*} > /dev/null 2>&1
    errorcheck $? "define hostname" "EXIT"
    echo "$ipaddress   $fqdn   ${fqdn%%.*}" >> /etc/hosts
    errorcheck $? "define FQDN" "EXIT"
    echo "1" > "$origpath/setupninja.step"
    echo
  fi
}

function unpackninja {
  #EXTRACTING INVOICE NINJA
  echo "Unpacking files..."
  if [[ -d "/var/www/$appdbname" ]]; then
    rm -R "/var/www/$appdbname"
  fi
  mkdir "/var/www/$appdbname"
  tar -xf invoiceninja.tar -C /var/www/$appdbname > /dev/null 2>&1
  errorcheck $? "tar -xf invoiceninja.tar -C /var/www/$appdbname" "EXIT"
  echo "12" > "$origpath/setupninja.step"
  echo
}

function vhostninja {
  #SETTING UP VHOST
  echo "Creating Apache2 VHost and Disabling the default VHost..."
  if [[ -f /etc/apache2/sites-available/$appdbname.conf ]]; then
    rm -f /etc/apache2/sites-available/$appdbname.conf
  fi
  touch /etc/apache2/sites-available/$appdbname.conf
  echo "<VirtualHost *:80>" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    ServerName $fqdn" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    DocumentRoot /var/www/$appdbname" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    <Directory /var/www/$appdbname>" >> /etc/apache2/sites-available/$appdbname.conf
  echo "       DirectoryIndex index.php" >> /etc/apache2/sites-available/$appdbname.conf
  echo "       Options +FollowSymLinks" >> /etc/apache2/sites-available/$appdbname.conf
  echo "       AllowOverride All" >> /etc/apache2/sites-available/$appdbname.conf
  echo "       Require all granted" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    </Directory>" >> /etc/apache2/sites-available/$appdbname.conf
  echo "" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    <FilesMatch \.php$>" >> /etc/apache2/sites-available/$appdbname.conf
  echo "       SetHandler \"proxy:unix:/run/php/php8.2-fpm.sock|fcgi://localhost\"" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    </FilesMatch>" >> /etc/apache2/sites-available/$appdbname.conf
  echo "" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    ErrorLog ${APACHE_LOG_DIR}/$appdbname_error.log" >> /etc/apache2/sites-available/$appdbname.conf
  echo "    CustomLog ${APACHE_LOG_DIR}/$appdbname_access.log combined" >> /etc/apache2/sites-available/$appdbname.conf
  echo "</VirtualHost>" >> /etc/apache2/sites-available/$appdbname.conf
  a2ensite $appdbname.conf > /dev/null 2>&1
  errorcheck $? "a2ensite $appdbname.conf" "EXIT"
  a2dissite 000-default.conf > /dev/null 2>&1
  errorcheck $? "a2dissite 000-default.conf" "EXIT"
  systemctl restart apache2 > /dev/null 2>&1
  errorcheck $? "systemctl restart apache2" "EXIT"
  echo "14" > "$origpath/setupninja.step"
  echo
}

#CHECK IF JSON EXISTS AND LOG EXISTS
apt -y install jq > /dev/null 2>&1
origpath=$(pwd)
step="0"
if [[ -f "$origpath/setupninja.log" ]]; then
  step=$( cat "$origpath/setupninja.step" )
  echo "STARTING AGAIN FROM STEP $step" >> "$origpath/setupninja.log"
  echo "Starting again from step $step"
  echo
else
  touch "$origpath/setupninja.log"
fi
if [[ -f "$origpath/setupninja.json" ]]; then
  applysettings
  echo "0" > "$origpath/setupninja.step"
else
  touch "$origpath/setupninja.json"
  gathersettings
fi
if [[ $step -lt "1" ]]; then
  sethostname
fi
if [[ $step -lt "2" ]]; then
  initsetup
fi
if [[ $step -lt "3" ]]; then
  gostandard
fi
if [[ $step -lt "4" ]]; then
  gosury
fi
if [[ $step -lt "5" ]]; then
  goapache
fi
if [[ $step -lt "6" ]]; then
  gomariadb
fi
if [[ $step -lt "7" ]]; then
  gophp
fi
if [[ $step -lt "8" ]]; then
  confapachephp
fi
if [[ $step -lt "9" ]]; then
  confmariadb
fi
if [[ $step -lt "10" ]]; then
  ninjadb
fi
if [[ $step -lt "11" ]]; then
  downloadninja
fi
if [[ $step -lt "12" ]]; then
  unpackninja
fi
if [[ $step -lt "13" ]]; then
  confninja
fi
if [[ $step -lt "14" ]]; then
  vhostninja
fi
if [[ $step -lt "15" ]]; then
  gossl
fi
if [[ $step -lt "16" ]]; then
  goweb
fi
if [[ $step -lt "17" ]]; then
  gocron
fi
if [[ $step -lt "18" ]]; then
  goreport
fi
if [[ $step -lt "19" ]]; then
  gohousekeeping
else
  echo "Nothing to do!"
fi
exit 0