#!/bin/bash
# Nginx + SSL untuk mjs.bdl.co.id — jalankan DI VPS (butuh sudo)
set -e

if [ "$(id -u)" -eq 0 ]; then
  SUDO=""
else
  SUDO="sudo"
fi

$SUDO apt update
$SUDO apt install -y nginx certbot python3-certbot-nginx

CONF_SRC="$HOME/mjs/deploy/nginx-mjs.conf"
CONF_DST="/etc/nginx/sites-available/mjs.bdl.co.id"

$SUDO cp "$CONF_SRC" "$CONF_DST"
$SUDO ln -sf "$CONF_DST" /etc/nginx/sites-enabled/mjs.bdl.co.id
$SUDO rm -f /etc/nginx/sites-enabled/default 2>/dev/null || true
$SUDO nginx -t
$SUDO systemctl enable nginx
$SUDO systemctl reload nginx

echo "→ Minta sertifikat SSL..."
$SUDO certbot --nginx -d mjs.bdl.co.id --non-interactive --agree-tos -m admin@bdl.co.id || \
  $SUDO certbot --nginx -d mjs.bdl.co.id

echo ""
echo "Selesai — buka https://mjs.bdl.co.id"