#!/bin/bash
# SSO Infrastructure Health Monitor
# Created by Ralph Loop Iteration 11

echo "=========================================="
echo "SSO Infrastructure Health Check"
echo "Time: $(date -Iseconds)"
echo "=========================================="
echo ""

# Check Authentik
echo "📊 Authentik Status (sso.obr.sh):"
cd /srv/docker/authentik
sudo docker compose ps --format "  {{.Name}}: {{.Status}}" 2>/dev/null
AUTHENTIK_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://sso.obr.sh 2>/dev/null || echo "FAIL")
echo "  HTTP Status: $AUTHENTIK_HTTP"
echo ""

# Check Pangolin
echo "🦎 Pangolin Status (tunnel.obr.sh):"
cd /srv/docker/pangolin
sudo docker compose ps --format "  {{.Name}}: {{.Status}}" 2>/dev/null
PANGOLIN_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://tunnel.obr.sh 2>/dev/null || echo "FAIL")
echo "  HTTP Status: $PANGOLIN_HTTP"
PANGOLIN_TOKEN=$(sudo docker compose logs pangolin 2>/dev/null | grep "Token:" | tail -1 | awk '{print $2}')
if [ -n "$PANGOLIN_TOKEN" ]; then
    echo "  Setup Token: $PANGOLIN_TOKEN"
fi
echo ""

# Check Guacamole
echo "🖥️  Guacamole Status (remote.obr.sh):"
cd /srv/docker/guacamole
sudo docker compose ps --format "  {{.Name}}: {{.Status}}" 2>/dev/null
GUAC_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://remote.obr.sh/guacamole/ 2>/dev/null || echo "FAIL")
echo "  HTTP Status: $GUAC_HTTP"
echo ""

# Check Network
echo "🌐 Network Status:"
echo "  LAN (br0): $(ip addr show br0 2>/dev/null | grep 'inet ' | awk '{print $2}' || echo 'ERROR')"
echo "  WAN (enp131s0): $(ip addr show enp131s0 2>/dev/null | grep 'inet ' | head -1 | awk '{print $2}' || echo 'ERROR')"
NAT_RULE=$(sudo nft list table ip nat 2>/dev/null | grep "10.50.0.0/24 masquerade" && echo "✅ ACTIVE" || echo "❌ MISSING")
echo "  NAT Masquerade (10.50.0.0/24): $NAT_RULE"
INTERNET=$(ping -c 1 -W 1 8.8.8.8 >/dev/null 2>&1 && echo "✅ WORKING" || echo "❌ FAILED")
echo "  Internet Access: $INTERNET"
echo ""

# Overall Status
echo "=========================================="
if [[ "$AUTHENTIK_HTTP" == "302" || "$AUTHENTIK_HTTP" == "200" ]] && \
   [[ "$PANGOLIN_HTTP" == "200" ]] && \
   [[ "$GUAC_HTTP" == "200" ]] && \
   [[ "$INTERNET" == "✅ WORKING" ]]; then
    echo "✅ ALL SYSTEMS OPERATIONAL"
else
    echo "⚠️  SOME ISSUES DETECTED - Review above"
fi
echo "=========================================="