#!/usr/bin/env bash
set -euo pipefail

ARCHIVE_URL="https://dl.md5.site/hardened/mdserver-web-hardened-20260628-r4.tar.gz"
ARCHIVE_SHA256="b2998c69cc43881d027ca497e3ccee7531971181eeded37d7898e5b40c44ab14"
TARGET="/www/server/mdserver-web"

if [ "$(id -u)" -ne 0 ]; then
    echo "Run this installer as root." >&2
    exit 1
fi
if [ -e "$TARGET" ]; then
    echo "$TARGET already exists; refusing to overwrite it." >&2
    exit 1
fi

tmp_dir=$(mktemp -d)
trap 'rm -rf "$tmp_dir"' EXIT
archive="$tmp_dir/mdserver-web-hardened.tar.gz"

curl --fail --location --proto '=https' --tlsv1.2 --output "$archive" "$ARCHIVE_URL"
echo "$ARCHIVE_SHA256  $archive" | sha256sum --check --strict -

mkdir -p /www/server
tar -xzf "$archive" -C /www/server
mv /www/server/mdserver-web-hardened "$TARGET"
cd "$TARGET"
exec bash scripts/install.sh