#!/bin/sh
#
# ex:ts=4

ask() {
	local question default answer

	question=$1
	default=$2
	if [ -z "${PACKAGE_BUILDING}" -a -z "${BATCH}" ]; then
		read -p "${question} [${default}]? " answer
	fi
	echo ${answer:-${default}}
}

yesno() {
	local question default answer

	question=$1
	default=$2
	while :; do
		answer=$(ask "${question}" "${default}")
		case "${answer}" in
		[Yy]*)	return 0;;
		[Nn]*)	return 1;;
		esac
		echo "Please answer yes or no."
	done
}

make_account() {
	local u g gcos

	u=$1
	g=$2
	gcos=$3

	if pw group show "${g}" >/dev/null 2>&1; then
		echo "You already have a group \"${g}\", so I will use it."
	else
		echo "You need a group \"${g}\"."
		if which -s pw && yesno "Would you like me to create it" y
		then
			pw groupadd ${g} || exit
			echo "Done."
		else
			echo "Please create it, and try again."
			exit 1
		fi
	fi
    
	if pw user show "${u}" >/dev/null 2>&1; then
		echo "You already have a user \"${u}\", so I will use it."
	else
		echo "You need a user \"${u}\"."
		if which -s pw && yesno "Would you like me to create it" y
		then
			pw useradd ${u} -g ${g} -c "${gcos}" -d /nonexistent -s /sbin/nologin -h - || exit
			echo "Done."
		else
			echo "Please create it, and try again."
			exit 1
		fi
	fi
}

case $2 in

PRE-INSTALL)
	make_account wired wired "Wired server"
	;;

POST-INSTALL)
	openssl req -batch -new -x509 -nodes -out ${PKG_PREFIX}/wired/etc/certificate.pem.sample -keyout ${PKG_PREFIX}/wired/etc/certificate.pem.sample;

	# We have to do this here instead of @exec in pkg-plist, because @exec clause
	# is executed before POST-INSTALL, which creates the certificate.pem.sample.
	if [ ! -f ${PKG_PREFIX}/wired/etc/certificate.pem ]; then
		cp -p ${PKG_PREFIX}/wired/etc/certificate.pem.sample ${PKG_PREFIX}/wired/etc/certificate.pem;
	fi
	;;

esac