thefeed/scripts/install.sh

#!/bin/bash

red='\033[0;31m'
green='\033[0;32m'
blue='\033[0;34m'
yellow='\033[0;33m'
plain='\033[0m'

GITHUB_REPO="sartoopjj/thefeed"
INSTALL_DIR="/opt/thefeed"
DATA_DIR="${INSTALL_DIR}/data"
SERVICE_FILE="/etc/systemd/system/thefeed-server.service"

# check root
[[ $EUID -ne 0 ]] && echo -e "${red}Fatal error:${plain} Please run this script with root privilege" && exit 1

# Check OS and set release variable
if [[ -f /etc/os-release ]]; then
    source /etc/os-release
    release=$ID
elif [[ -f /usr/lib/os-release ]]; then
    source /usr/lib/os-release
    release=$ID
else
    echo -e "${red}Failed to check the system OS, please contact the author!${plain}" >&2
    exit 1
fi
echo -e "OS: ${green}$release${plain}"

arch() {
    case "$(uname -m)" in
        x86_64 | x64 | amd64) echo 'amd64' ;;
        armv8* | armv8 | arm64 | aarch64) echo 'arm64' ;;
        *) echo -e "${red}Unsupported CPU architecture: $(uname -m)${plain}" && exit 1 ;;
    esac
}

echo -e "Arch: ${green}$(arch)${plain}"

install_base() {
    echo -e "${green}Installing base dependencies...${plain}"
    case "${release}" in
        ubuntu | debian | armbian)
            apt-get update && apt-get install -y -q curl tar ca-certificates
        ;;
        fedora | amzn | rhel | almalinux | rocky | ol)
            dnf -y update && dnf install -y -q curl tar ca-certificates
        ;;
        centos)
            if [[ "${VERSION_ID}" =~ ^7 ]]; then
                yum -y update && yum install -y curl tar ca-certificates
            else
                dnf -y update && dnf install -y -q curl tar ca-certificates
            fi
        ;;
        arch | manjaro | parch)
            pacman -Syu --noconfirm curl tar ca-certificates
        ;;
        alpine)
            apk update && apk add curl tar ca-certificates bash
        ;;
        *)
            apt-get update && apt-get install -y -q curl tar ca-certificates
        ;;
    esac
}

get_latest_version() {
    local version
    version=$(curl -Ls "https://api.github.com/repos/${GITHUB_REPO}/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
    if [[ -z "$version" ]]; then
        echo -e "${yellow}Trying with IPv4...${plain}" >&2
        version=$(curl -4 -Ls "https://api.github.com/repos/${GITHUB_REPO}/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
    fi
    echo "$version"
}

download_binary() {
    local version="$1"
    local arch_name
    arch_name=$(arch)
    local binary_name="thefeed-server-linux-${arch_name}"
    local url="https://github.com/${GITHUB_REPO}/releases/download/${version}/${binary_name}"

    echo -e "${green}Downloading thefeed-server ${version} for linux/${arch_name}...${plain}"
    mkdir -p "$INSTALL_DIR"

    curl -4fLo "${INSTALL_DIR}/thefeed-server" "$url"
    if [[ $? -ne 0 ]]; then
        echo -e "${red}Failed to download binary from:${plain}"
        echo -e "${red}  ${url}${plain}"
        echo -e "${yellow}Please check that the version exists and your server can reach GitHub${plain}"
        exit 1
    fi

    chmod 755 "${INSTALL_DIR}/thefeed-server"
    echo -e "${green}Binary installed to ${INSTALL_DIR}/thefeed-server${plain}"
}

setup_config() {
    mkdir -p "$DATA_DIR"

    # Channels file
    if [[ ! -f "$DATA_DIR/channels.txt" ]]; then
        echo -e "\n${green}Setting up channels...${plain}"
        echo "# Telegram channel usernames (one per line)" > "$DATA_DIR/channels.txt"
        echo "# Lines starting with # are comments" >> "$DATA_DIR/channels.txt"

        echo ""
        echo -e "${yellow}Enter Telegram channel usernames (one per line, empty line to finish):${plain}"
        while true; do
            read -rp "  Channel: " channel
            if [[ -z "$channel" ]]; then
                break
            fi
            channel="${channel#@}"
            echo "@$channel" >> "$DATA_DIR/channels.txt"
            echo -e "  ${green}Added @${channel}${plain}"
        done
    else
        echo -e "${yellow}Channels file already exists: ${DATA_DIR}/channels.txt${plain}"
    fi

    # Environment file
    if [[ ! -f "$DATA_DIR/thefeed.env" ]]; then
        echo -e "\n${green}═══════════════════════════════════════${plain}"
        echo -e "${green}  Server Configuration${plain}"
        echo -e "${green}═══════════════════════════════════════${plain}"
        echo ""

        local domain=""
        while true; do
            read -rp "DNS domain (e.g., t.example.com): " domain
            if [[ -n "$domain" ]]; then break; fi
            echo -e "${red}Domain cannot be empty${plain}"
        done

        local passkey=""
        while true; do
            read -rp "Encryption passphrase: " passkey
            if [[ -n "$passkey" ]]; then break; fi
            echo -e "${red}Passphrase cannot be empty${plain}"
        done

        local api_id=""
        while true; do
            read -rp "Telegram API ID: " api_id
            if [[ "$api_id" =~ ^[0-9]+$ ]]; then break; fi
            echo -e "${red}API ID must be a number${plain}"
        done

        local api_hash=""
        while true; do
            read -rp "Telegram API Hash: " api_hash
            if [[ -n "$api_hash" ]]; then break; fi
            echo -e "${red}API Hash cannot be empty${plain}"
        done

        local phone=""
        while true; do
            read -rp "Telegram phone number (e.g., +1234567890): " phone
            if [[ -n "$phone" ]]; then break; fi
            echo -e "${red}Phone number cannot be empty${plain}"
        done

        read -rp "DNS listen address [0.0.0.0:53]: " listen_addr
        listen_addr="${listen_addr:-0.0.0.0:53}"

        cat > "$DATA_DIR/thefeed.env" <<ENVEOF
THEFEED_DOMAIN=${domain}
THEFEED_KEY=${passkey}
TELEGRAM_API_ID=${api_id}
TELEGRAM_API_HASH=${api_hash}
TELEGRAM_PHONE=${phone}
THEFEED_LISTEN=${listen_addr}
ENVEOF
        chmod 600 "$DATA_DIR/thefeed.env"
        echo -e "${green}Config saved to ${DATA_DIR}/thefeed.env${plain}"
    else
        echo -e "${yellow}Config already exists: ${DATA_DIR}/thefeed.env${plain}"
    fi

    chmod 700 "$DATA_DIR"
}

telegram_login() {
    echo -e "\n${green}═══════════════════════════════════════${plain}"
    echo -e "${green}  Telegram Login (one-time)${plain}"
    echo -e "${green}═══════════════════════════════════════${plain}"
    echo -e "${yellow}This will authenticate with Telegram and save the session.${plain}"
    echo ""

    set -a
    source "$DATA_DIR/thefeed.env"
    set +a

    "$INSTALL_DIR/thefeed-server" \
        --login-only \
        --data-dir "$DATA_DIR" \
        --domain "$THEFEED_DOMAIN" \
        --key "$THEFEED_KEY" \
        --api-id "$TELEGRAM_API_ID" \
        --api-hash "$TELEGRAM_API_HASH" \
        --phone "$TELEGRAM_PHONE"

    if [[ $? -ne 0 ]]; then
        echo -e "${red}Telegram login failed${plain}"
        echo -e "${yellow}You can retry later with:${plain}"
        echo -e "  sudo bash install.sh --login"
        return 1
    fi

    chmod 600 "$DATA_DIR/session.json"
    echo -e "${green}Telegram login successful, session saved.${plain}"
}

install_service() {
    echo -e "${green}Installing systemd service...${plain}"

    set -a
    source "$DATA_DIR/thefeed.env"
    set +a

    cat > "$SERVICE_FILE" <<SVCEOF
[Unit]
Description=thefeed DNS-based Telegram Feed Server
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
WorkingDirectory=${INSTALL_DIR}
EnvironmentFile=${DATA_DIR}/thefeed.env
ExecStart=${INSTALL_DIR}/thefeed-server \\
    --data-dir ${DATA_DIR} \\
    --domain \${THEFEED_DOMAIN} \\
    --key \${THEFEED_KEY} \\
    --api-id \${TELEGRAM_API_ID} \\
    --api-hash \${TELEGRAM_API_HASH} \\
    --phone \${TELEGRAM_PHONE} \\
    --listen \${THEFEED_LISTEN}

Restart=on-failure
RestartSec=10
StandardOutput=journal
StandardError=journal

# Security hardening
ProtectHome=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target
SVCEOF

    systemctl daemon-reload
    echo -e "${green}Service installed: thefeed-server${plain}"
}

start_service() {
    echo -e "${green}Enabling and starting service...${plain}"
    systemctl enable thefeed-server
    systemctl start thefeed-server
    echo ""
    echo -e "${green}Service status:${plain}"
    systemctl status thefeed-server --no-pager || true
}

show_usage() {
    echo ""
    echo -e "┌─────────────────────────────────────────────────────┐"
    echo -e "│  ${blue}thefeed service management:${plain}                        │"
    echo -e "│                                                     │"
    echo -e "│  ${blue}systemctl status thefeed-server${plain}   - Status         │"
    echo -e "│  ${blue}systemctl restart thefeed-server${plain}  - Restart        │"
    echo -e "│  ${blue}systemctl stop thefeed-server${plain}     - Stop           │"
    echo -e "│  ${blue}journalctl -u thefeed-server -f${plain}  - Live logs       │"
    echo -e "│                                                     │"
    echo -e "│  All data in: ${blue}${INSTALL_DIR}/${plain}                         │"
    echo -e "│  ${blue}Config:${plain}   ${DATA_DIR}/thefeed.env            │"
    echo -e "│  ${blue}Channels:${plain} ${DATA_DIR}/channels.txt           │"
    echo -e "│  ${blue}Session:${plain}  ${DATA_DIR}/session.json           │"
    echo -e "│  ${blue}Binary:${plain}   ${INSTALL_DIR}/thefeed-server              │"
    echo -e "│                                                     │"
    echo -e "│  ${yellow}Update:${plain} sudo bash install.sh                       │"
    echo -e "│  ${yellow}Re-login:${plain} sudo bash install.sh --login             │"
    echo -e "└─────────────────────────────────────────────────────┘"
    echo ""
}

install_thefeed() {
    local version="$1"

    # Get version
    if [[ -z "$version" ]]; then
        version=$(get_latest_version)
        if [[ -z "$version" ]]; then
            echo -e "${red}Failed to fetch latest version from GitHub${plain}"
            echo -e "${yellow}Please check your network or specify a version: bash install.sh v1.0.0${plain}"
            exit 1
        fi
    fi
    echo -e "Version: ${green}${version}${plain}"

    # Check current version
    if [[ -f "${INSTALL_DIR}/thefeed-server" ]]; then
        local current_version
        current_version=$("${INSTALL_DIR}/thefeed-server" --version 2>&1 | awk '{print $2}' || echo "unknown")
        echo -e "Current: ${yellow}${current_version}${plain}"
        if [[ "$current_version" == "$version" ]]; then
            echo -e "${yellow}Already running ${version}. Reinstalling anyway...${plain}"
        fi
    fi

    # Stop existing service
    if systemctl is-active thefeed-server &>/dev/null; then
        echo -e "${yellow}Stopping existing service...${plain}"
        systemctl stop thefeed-server
    fi

    # Download
    download_binary "$version"

    # First install: full setup
    if [[ ! -f "$DATA_DIR/thefeed.env" ]]; then
        setup_config
        telegram_login
        install_service
        start_service
    else
        # Update: regenerate service file and restart
        install_service
        start_service
    fi

    echo -e "\n${green}═══════════════════════════════════════${plain}"
    echo -e "${green}  thefeed ${version} installed successfully!${plain}"
    echo -e "${green}═══════════════════════════════════════${plain}"
    show_usage
}

login_only() {
    if [[ ! -f "$DATA_DIR/thefeed.env" ]]; then
        echo -e "${red}Config not found. Run install first: bash install.sh${plain}"
        exit 1
    fi
    if [[ ! -f "${INSTALL_DIR}/thefeed-server" ]]; then
        echo -e "${red}Binary not found. Run install first: bash install.sh${plain}"
        exit 1
    fi
    telegram_login
    echo -e "${green}Restarting service...${plain}"
    systemctl restart thefeed-server || true
}

uninstall_thefeed() {
    echo -e "${yellow}Uninstalling thefeed...${plain}"

    systemctl stop thefeed-server 2>/dev/null || true
    systemctl disable thefeed-server 2>/dev/null || true
    rm -f "$SERVICE_FILE"
    systemctl daemon-reload

    read -rp "Remove all data (config, session, binary)? [y/N]: " remove_data
    if [[ "$remove_data" == "y" || "$remove_data" == "Y" ]]; then
        rm -rf "$INSTALL_DIR"
        echo -e "${green}All data removed${plain}"
    else
        rm -f "${INSTALL_DIR}/thefeed-server"
        echo -e "${green}Binary removed (data preserved in ${DATA_DIR})${plain}"
    fi

    echo -e "${green}thefeed uninstalled successfully${plain}"
}

show_help() {
    echo -e "thefeed install script"
    echo ""
    echo -e "Usage: bash $0 [OPTION]"
    echo ""
    echo -e "Options:"
    echo -e "  ${green}(no args)${plain}       Install or update to latest version"
    echo -e "  ${green}v1.0.0${plain}          Install specific version"
    echo -e "  ${green}--login${plain}         Re-authenticate with Telegram"
    echo -e "  ${green}--uninstall${plain}     Remove thefeed"
    echo -e "  ${green}--help${plain}          Show this help"
}

# Main
echo -e "${green}Running thefeed installer...${plain}"

case "${1:-}" in
    --help | -h)
        show_help
        ;;
    --login)
        login_only
        ;;
    --uninstall)
        uninstall_thefeed
        ;;
    *)
        install_base
        install_thefeed "$1"
        ;;
esac