#!/bin/bash

cat << "EOF"
  ██████╗██╗  ██╗ █████╗ ███╗   ██╗ ██████╗ ███████╗
 ██╔════╝██║  ██║██╔══██╗████╗  ██║██╔════╝ ██╔════╝
 ██║     ███████║███████║██╔██╗ ██║██║  ███╗█████╗  
 ██║     ██╔══██║██╔══██║██║╚██╗██║██║   ██║██╔══╝  
 ╚██████╗██║  ██║██║  ██║██║ ╚████║╚██████╔╝███████╗
  ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═══╝ ╚═════╝ ╚══════╝
                                                    
 ███╗   ███╗ █████╗ ██╗  ██╗███████╗██████╗ 
 ████╗ ████║██╔══██╗██║ ██╔╝██╔════╝██╔══██╗
 ██╔████╔██║███████║█████╔╝ █████╗  ██████╔╝
 ██║╚██╔╝██║██╔══██║██╔═██╗ ██╔══╝  ██╔══██╗
 ██║ ╚═╝ ██║██║  ██║██║  ██╗███████╗██║  ██║
 ╚═╝     ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝
                        Configuration Wizard
EOF

# Get the absolute path of the script directory
SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
ENV_FILE="$SCRIPT_DIR/.env"
MKDOCS_YML="$SCRIPT_DIR/mkdocs/docs/mkdocs.yml"
TUNNEL_CONFIG_DIR="$SCRIPT_DIR/configs/cloudflare"
TUNNEL_CONFIG_FILE="$TUNNEL_CONFIG_DIR/tunnel-config.yml"
SERVICES_YAML="$SCRIPT_DIR/configs/homepage/services.yaml"
MAIN_HTML="$SCRIPT_DIR/mkdocs/docs/overrides/main.html"

echo "Looking for .env file at: $ENV_FILE"

# Function to generate a random secure password
generate_password() {
  local length=${1:-16}
  openssl rand -base64 48 | tr -dc 'a-zA-Z0-9!@#$%^&*()-_=+' | head -c "$length"
}

# Function to safely update environment variables in .env file
update_env_var() {
  local key=$1
  local value=$2
  
  # More robust method to handle special characters in passwords
  if grep -q "^$key=" "$ENV_FILE"; then
    # Create a temporary file
    local tmpfile=$(mktemp)
    
    # Process the .env file line by line
    while IFS= read -r line; do
      if [[ "$line" =~ ^$key= ]]; then
        echo "$key=$value" >> "$tmpfile"
      else
        echo "$line" >> "$tmpfile"
      fi
    done < "$ENV_FILE"
    
    # Replace the original file with the temporary file
    mv "$tmpfile" "$ENV_FILE"
    echo "Updated $key in .env file"
  else
    # Add new key-value pair if it doesn't exist
    echo "$key=$value" >> "$ENV_FILE"
    echo "Added $key to .env file"
  fi
}

# Function to create a timestamped backup of the .env file
backup_env_file() {
  if [ -f "$ENV_FILE" ]; then
    local timestamp=$(date +"%Y%m%d_%H%M%S")
    local backup_file="$ENV_FILE.backup_$timestamp"
    
    echo "Creating backup of current .env file to: $backup_file"
    if cp "$ENV_FILE" "$backup_file"; then
      echo "Backup created successfully!"
      return 0
    else
      echo "Failed to create backup file. Proceeding with caution..."
      return 1
    fi
  fi
}

# Function to initialize the .env file with default values
initialize_env_file() {
  echo "Initializing new .env file with default values..."
  
  cat > "$ENV_FILE" << EOL
# Never share this file publicly. It contains sensitive information.
# This file is used to configure various applications and services.
# Generated by Changemaker Config Wizard on $(date)

# User and Group Configuration
USER_NAME=coder
USER_ID=1000
GROUP_ID=1000

# Port Configuration
CODE_SERVER_PORT=8888
LISTMONK_PORT=9000
LISTMONK_DB_PORT=5432
MKDOCS_PORT=4000
MKDOCS_SITE_SERVER_PORT=4001
N8N_PORT=5678
NOCODB_PORT=8090
HOMEPAGE_PORT=3010
GITEA_WEB_PORT=3030
GITEA_SSH_PORT=2222

# Domain Configuration
BASE_DOMAIN=https://changeme.org
DOMAIN=changeme.org
LISTMONK_HOSTNAME=listmonk.changeme.org
N8N_HOST=n8n.changeme.org
GITEA_DOMAIN=git.changeme.org
GITEA_ROOT_URL=https://git.changeme.org

# Cloudflare Configuration
CF_API_TOKEN=your_cloudflare_api_token
CF_ZONE_ID=your_cloudflare_zone_id
CF_TUNNEL_ID=your_cloudflared_tunnel_id
CF_DOMAIN=changeme.org

# Database Configuration (PostgreSQL for Listmonk)
POSTGRES_USER=listmonk
POSTGRES_PASSWORD=changeMe
POSTGRES_DB=listmonk

# Listmonk Database Performance Settings
LISTMONK_DB_MAX_OPEN=25
LISTMONK_DB_MAX_IDLE=25
LISTMONK_DB_MAX_LIFETIME=300s

# Listmonk Admin Configuration
LISTMONK_ADMIN_USER=admin
LISTMONK_ADMIN_PASSWORD=changeMe

# N8N Configuration
N8N_USER_EMAIL=admin@example.com
N8N_USER_PASSWORD=changeMe
N8N_ENCRYPTION_KEY=changeMe
GENERIC_TIMEZONE=UTC

# Nocodb Configuration
NOCODB_JWT_SECRET=changeMe
NOCODB_DB_NAME=nocodb
NOCODB_DB_USER=noco
NOCODB_DB_PASSWORD=changeMe
HOMEPAGE_VAR_BASE_URL=https://changeme.org
EOL

  echo "New .env file created with default values."
}

# Function to update the site_url in mkdocs.yml
update_mkdocs_yml() {
  local new_domain=$1
  
  if [ ! -f "$MKDOCS_YML" ]; then
    echo "Warning: mkdocs.yml not found at $MKDOCS_YML"
    return 1
  fi
  
  echo "Updating site_url in mkdocs.yml..."
  
  # Create a backup of the mkdocs.yml file
  local timestamp=$(date +"%Y%m%d_%H%M%S")
  local backup_file="${MKDOCS_YML}.backup_${timestamp}"
  cp "$MKDOCS_YML" "$backup_file"
  echo "Created backup of mkdocs.yml at $backup_file"
  
  # Update the site_url value
  sed -i "s|^site_url:.*|site_url: https://$new_domain|" "$MKDOCS_YML"
  
  if grep -q "site_url: https://$new_domain" "$MKDOCS_YML"; then
    echo "Updated site_url in mkdocs.yml to: https://$new_domain"
    return 0
  else
    echo "Warning: Failed to update site_url in mkdocs.yml"
    return 1
  fi
}

# Function to update service URLs in services.yaml
update_services_yaml() {
  local new_domain=$1
  
  if [ ! -f "$SERVICES_YAML" ]; then
    echo "Warning: services.yaml not found at $SERVICES_YAML"
    return 1
  fi
  
  echo "Updating service URLs in services.yaml..."
  
  # Create a backup of the services.yaml file
  local timestamp=$(date +"%Y%m%d_%H%M%S")
  local backup_file="${SERVICES_YAML}.backup_${timestamp}"
  cp "$SERVICES_YAML" "$backup_file"
  echo "Created backup of services.yaml at $backup_file"
  
  # Update the commented URLs to use the new domain
  sed -i "s|# href: \"https://code\.changeme\.org\"|# href: \"https://code.$new_domain\"|g" "$SERVICES_YAML"
  sed -i "s|# href: \"https://listmonk\.changeme\.org\"|# href: \"https://listmonk.$new_domain\"|g" "$SERVICES_YAML"
  sed -i "s|# href: \"https://db\.changeme\.org\"|# href: \"https://db.$new_domain\"|g" "$SERVICES_YAML"
  sed -i "s|# href: \"https://docs\.changeme\.org\"|# href: \"https://docs.$new_domain\"|g" "$SERVICES_YAML"
  sed -i "s|# href: \"https://n8n\.changeme\.org\"|# href: \"https://n8n.$new_domain\"|g" "$SERVICES_YAML"
  sed -i "s|# href: \"https://test\.com\"|# href: \"https://$new_domain\"|g" "$SERVICES_YAML"
  
  # Also update any remaining changeme.org references
  sed -i "s|changeme\.org|$new_domain|g" "$SERVICES_YAML"
  
  echo "Updated service URLs in services.yaml to use domain: $new_domain"
  return 0
}

# Function to update the login URL in main.html
update_main_html() {
  local new_domain=$1
  
  if [ ! -f "$MAIN_HTML" ]; then
    echo "Warning: main.html not found at $MAIN_HTML"
    return 1
  fi
  
  echo "Updating login URL in main.html..."
  
  # Create a backup of the main.html file
  local timestamp=$(date +"%Y%m%d_%H%M%S")
  local backup_file="${MAIN_HTML}.backup_${timestamp}"
  cp "$MAIN_HTML" "$backup_file"
  echo "Created backup of main.html at $backup_file"
  
  # Update the login button href to use the new domain
  sed -i "s|href=\"https://homepage\.test\.com\"|href=\"https://homepage.$new_domain\"|g" "$MAIN_HTML"
  
  # Also update any other test.com references
  sed -i "s|homepage\.test\.com|homepage.$new_domain|g" "$MAIN_HTML"
  
  echo "Updated login URL in main.html to: https://homepage.$new_domain"
  return 0
}

# Function to check if a port is in use
check_port() {
  local port=$1
  if command -v ss >/dev/null 2>&1; then
    ss -tuln | grep -q ":$port "
  elif command -v netstat >/dev/null 2>&1; then
    netstat -tuln | grep -q ":$port "
  else
    # Fallback to lsof if available
    if command -v lsof >/dev/null 2>&1; then
      lsof -i ":$port" >/dev/null 2>&1
    else
      echo "Warning: Cannot check port availability. Please ensure ports are free manually."
      return 1
    fi
  fi
}

# Function to check all service ports for conflicts
check_port_conflicts() {
  echo "Checking for port conflicts..."
  
  local ports_to_check=(
    "${CODE_SERVER_PORT:-8888}:Code Server"
    "${LISTMONK_PORT:-9000}:Listmonk"
    "${LISTMONK_DB_PORT:-5432}:Listmonk Database"
    "${MKDOCS_PORT:-4000}:MkDocs"
    "${MKDOCS_SITE_SERVER_PORT:-4001}:MkDocs Site Server"
    "${N8N_PORT:-5678}:N8N"
    "${NOCODB_PORT:-8090}:NocoDB"
    "${HOMEPAGE_PORT:-3010}:Homepage"
    "${GITEA_WEB_PORT:-3030}:Gitea Web"
    "${GITEA_SSH_PORT:-2222}:Gitea SSH"
  )
  
  local conflicts_found=false
  
  for port_info in "${ports_to_check[@]}"; do
    local port=$(echo "$port_info" | cut -d: -f1)
    local service=$(echo "$port_info" | cut -d: -f2)
    
    if check_port "$port"; then
      echo "⚠️  Port conflict detected: $port is already in use (assigned to $service)"
      conflicts_found=true
    else
      echo "✅ Port $port is available for $service"
    fi
  done
  
  if [ "$conflicts_found" = true ]; then
    echo ""
    echo "Port conflicts detected! Please choose alternative ports or stop conflicting services."
    read -p "Do you want to configure alternative ports? [Y/n]: " configure_ports
    
    if [[ "$configure_ports" =~ ^[Nn]$ ]]; then
      echo "Configuration cancelled. Please resolve port conflicts and try again."
      exit 1
    else
      configure_alternative_ports
    fi
  else
    echo "✅ All ports are available!"
  fi
}

# Function to configure alternative ports
configure_alternative_ports() {
  echo ""
  echo "---- Port Configuration ----"
  
  # Code Server
  if check_port "${CODE_SERVER_PORT:-8888}"; then
    read -p "Enter alternative port for Code Server [current: ${CODE_SERVER_PORT:-8888}]: " new_code_port
    if [ ! -z "$new_code_port" ]; then
      update_env_var "CODE_SERVER_PORT" "$new_code_port"
    fi
  fi
  
  # Listmonk
  if check_port "${LISTMONK_PORT:-9000}"; then
    read -p "Enter alternative port for Listmonk [current: ${LISTMONK_PORT:-9000}]: " new_listmonk_port
    if [ ! -z "$new_listmonk_port" ]; then
      update_env_var "LISTMONK_PORT" "$new_listmonk_port"
    fi
  fi
  
  # Listmonk DB
  if check_port "${LISTMONK_DB_PORT:-5432}"; then
    read -p "Enter alternative port for Listmonk Database [current: ${LISTMONK_DB_PORT:-5432}]: " new_db_port
    if [ ! -z "$new_db_port" ]; then
      update_env_var "LISTMONK_DB_PORT" "$new_db_port"
    fi
  fi
  
  # MkDocs
  if check_port "${MKDOCS_PORT:-4000}"; then
    read -p "Enter alternative port for MkDocs [current: ${MKDOCS_PORT:-4000}]: " new_mkdocs_port
    if [ ! -z "$new_mkdocs_port" ]; then
      update_env_var "MKDOCS_PORT" "$new_mkdocs_port"
    fi
  fi
  
  # MkDocs Site Server
  if check_port "${MKDOCS_SITE_SERVER_PORT:-4001}"; then
    read -p "Enter alternative port for MkDocs Site Server [current: ${MKDOCS_SITE_SERVER_PORT:-4001}]: " new_site_port
    if [ ! -z "$new_site_port" ]; then
      update_env_var "MKDOCS_SITE_SERVER_PORT" "$new_site_port"
    fi
  fi
  
  # N8N
  if check_port "${N8N_PORT:-5678}"; then
    read -p "Enter alternative port for N8N [current: ${N8N_PORT:-5678}]: " new_n8n_port
    if [ ! -z "$new_n8n_port" ]; then
      update_env_var "N8N_PORT" "$new_n8n_port"
    fi
  fi
  
  # NocoDB
  if check_port "${NOCODB_PORT:-8090}"; then
    read -p "Enter alternative port for NocoDB [current: ${NOCODB_PORT:-8090}]: " new_nocodb_port
    if [ ! -z "$new_nocodb_port" ]; then
      update_env_var "NOCODB_PORT" "$new_nocodb_port"
    fi
  fi
  
  # Homepage
  if check_port "${HOMEPAGE_PORT:-3010}"; then
    read -p "Enter alternative port for Homepage [current: ${HOMEPAGE_PORT:-3010}]: " new_homepage_port
    if [ ! -z "$new_homepage_port" ]; then
      update_env_var "HOMEPAGE_PORT" "$new_homepage_port"
    fi
  fi
  
  # Gitea Web
  if check_port "${GITEA_WEB_PORT:-3030}"; then
    read -p "Enter alternative port for Gitea Web [current: ${GITEA_WEB_PORT:-3030}]: " new_gitea_web_port
    if [ ! -z "$new_gitea_web_port" ]; then
      update_env_var "GITEA_WEB_PORT" "$new_gitea_web_port"
    fi
  fi
  
  # Gitea SSH
  if check_port "${GITEA_SSH_PORT:-2222}"; then
    read -p "Enter alternative port for Gitea SSH [current: ${GITEA_SSH_PORT:-2222}]: " new_gitea_ssh_port
    if [ ! -z "$new_gitea_ssh_port" ]; then
      update_env_var "GITEA_SSH_PORT" "$new_gitea_ssh_port"
    fi
  fi
  
  echo "Port configuration completed."
}

# Function to create Cloudflare tunnel configuration file
create_tunnel_config() {
  local domain=$1
  local tunnel_id=$2
  
  # Ensure the tunnel config directory exists
  if [ ! -d "$TUNNEL_CONFIG_DIR" ]; then
    echo "Creating Cloudflare tunnel config directory at $TUNNEL_CONFIG_DIR"
    mkdir -p "$TUNNEL_CONFIG_DIR"
  fi
  
  echo "Creating Cloudflare tunnel configuration file..."
  
  # Generate the tunnel configuration file with simpler format
  cat > "$TUNNEL_CONFIG_FILE" << EOL
# filepath: /home/bunker-admin/changemaker.lite/configs/cloudflare/tunnel-config.yml
# Cloudflare Tunnel Configuration
# Auto-generated by Changemaker Configuration Wizard

tunnel: $tunnel_id # e.g. 1234567890abcdef
credentials-file: /home/coder/.cloudflared/$tunnel_id.json # e.g. /home/coder/.cloudflared/[insert tunnel number].json
ingress:

  - hostname: homepage.$domain
    service: http://localhost:${HOMEPAGE_PORT:-3010}

  - hostname: code.$domain
    service: http://localhost:${CODE_SERVER_PORT:-8888}

  - hostname: listmonk.$domain
    service: http://localhost:${LISTMONK_PORT:-9000}
    
  - hostname: docs.$domain
    service: http://localhost:${MKDOCS_PORT:-4000}
    
  - hostname: $domain
    service: http://localhost:${MKDOCS_SITE_SERVER_PORT:-4001}
    
  - hostname: n8n.$domain
    service: http://localhost:${N8N_PORT:-5678}
    
  - hostname: db.$domain
    service: http://localhost:${NOCODB_PORT:-8090}

  - hostname: git.$domain
    service: http://localhost:${GITEA_WEB_PORT:-3030}

  # Catch-all rule (required)
  - service: http_status:404
EOL

  echo "✅ Tunnel configuration file created at: $TUNNEL_CONFIG_FILE"
  
  # If the tunnel ID is a placeholder, provide instructions
  if [[ "$tunnel_id" == "\${CF_TUNNEL_ID}" ]]; then
    echo "NOTE: You need to replace ${CF_TUNNEL_ID} with your actual Cloudflare Tunnel ID"
    echo "      once you create a tunnel in the Cloudflare Zero Trust dashboard."
  fi
}

# Function to show tunnel setup instructions
show_tunnel_instructions() {
  local domain=$1
  
  echo ""
  echo "=== Cloudflare Tunnel Setup Instructions ==="
  echo ""
  echo "To complete the tunnel setup:"
  echo ""
  echo "1. Install cloudflared on your server:"
  echo "   https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation"
  echo ""
  echo "2. Create a tunnel using the Cloudflare dashboard or run:"
  echo "   cloudflared tunnel create changemaker-tunnel"
  echo ""
  echo "3. Copy the credentials file to the correct location:"
  echo "   mkdir -p /home/coder/.cloudflared"
  echo "   cp ~/.cloudflared/[TUNNEL-ID].json /home/coder/.cloudflared/"
  echo ""
  echo "4. Update your .env with the correct CF_TUNNEL_ID if not already done"
  echo ""
  echo "5. Start the tunnel with your configuration file:"
  echo "   cloudflared tunnel --config $TUNNEL_CONFIG_FILE run"
  echo ""
  echo "6. After verifying it works, you can create a systemd service for automatic startup:"
  echo "   sudo cloudflared service install"
  echo ""
  echo "7. Your services will be available at the following URLs:"
  echo "   - Documentation: https://$domain"
  echo "   - Homepage: https://homepage.$domain"
  echo "   - Code Server: https://code.$domain"
  echo "   - Listmonk: https://listmonk.$domain"
  echo "   - N8N: https://n8n.$domain"
  echo "   - NocoDB: https://db.$domain"
  echo "   - MkDocs Dev: https://docs.$domain"
  echo "   - Gitea: https://git.$domain"
  echo ""
}

# Function to load environment variables from .env file
load_env_vars() {
  if [ -f "$ENV_FILE" ]; then
    # Load variables from .env file, ignoring comments and empty lines
    while IFS= read -r line; do
      if [[ "$line" =~ ^[A-Za-z_][A-Za-z0-9_]*= ]]; then
        export "$line"
      fi
    done < <(grep -E '^[A-Za-z_][A-Za-z0-9_]*=' "$ENV_FILE")
  fi
}

# Initialize a new .env file if it doesn't exist
if [ ! -f "$ENV_FILE" ]; then
  echo "No .env file found. Creating a new one from scratch."
  touch "$ENV_FILE"
  initialize_env_file
else
  echo "Found existing .env file. Will update values."
  backup_env_file
fi

# Load existing environment variables
load_env_vars

echo -e "\n\nWelcome to Changemaker Config!\n"
echo "This script will help you configure your .env file for Changemaker."
echo "Please provide the following information:"

# Domain configuration
read -p "Enter your domain name (without protocol, e.g., example.com): " domain_name

if [ -z "$domain_name" ]; then
  echo "Domain name cannot be empty. Using default: changeme.org"
  domain_name="changeme.org"
fi

echo -e "\nUpdating domain settings in .env file..."

# Update main domain settings
update_env_var "DOMAIN" "$domain_name"
update_env_var "BASE_DOMAIN" "https://$domain_name"
update_env_var "HOMEPAGE_VAR_BASE_URL" "https://$domain_name"
update_env_var "LISTMONK_HOSTNAME" "listmonk.$domain_name"
update_env_var "N8N_HOST" "n8n.$domain_name"
update_env_var "CF_DOMAIN" "$domain_name"
update_env_var "GITEA_DOMAIN" "git.$domain_name"
update_env_var "GITEA_ROOT_URL" "https://git.$domain_name"

echo "Domain settings updated successfully!"

# Cloudflare Configuration
echo -e "\n---- Cloudflare Configuration ----"
echo "To use the DNS setup script, you'll need Cloudflare credentials."
echo "You can find these values in your Cloudflare dashboard:"
echo "  - API Token: https://dash.cloudflare.com/profile/api-tokens"
echo "    (Create a token with Zone:DNS:Edit and Access:Apps:Edit permissions)"
echo "  - Zone ID: On your domain's overview page"
echo "  - Tunnel ID: In the Zero Trust dashboard under Access > Tunnels"
echo ""

read -p "Do you want to configure Cloudflare settings now? [Y/n]: " configure_cf

if [[ ! "$configure_cf" =~ ^[Nn]$ ]]; then
  echo ""
  echo "Please enter your Cloudflare credentials:"
  
  # CF API Token
  read -p "Enter your Cloudflare API Token: " cf_api_token
  if [ ! -z "$cf_api_token" ]; then
    # Basic validation for API token format
    if [[ "$cf_api_token" =~ ^[A-Za-z0-9_-]{40}$ ]]; then
      update_env_var "CF_API_TOKEN" "$cf_api_token"
      echo "✅ Cloudflare API Token updated"
    else
      echo "⚠️  Warning: API Token format seems incorrect (should be 40 characters)"
      update_env_var "CF_API_TOKEN" "$cf_api_token"
    fi
  else
    echo "⚠️  Cloudflare API Token left unchanged"
  fi
  
  # CF Zone ID
  read -p "Enter your Cloudflare Zone ID: " cf_zone_id
  if [ ! -z "$cf_zone_id" ]; then
    # Basic validation for Zone ID format
    if [[ "$cf_zone_id" =~ ^[a-f0-9]{32}$ ]]; then
      update_env_var "CF_ZONE_ID" "$cf_zone_id"
      echo "✅ Cloudflare Zone ID updated"
    else
      echo "⚠️  Warning: Zone ID format seems incorrect (should be 32 hex characters)"
      update_env_var "CF_ZONE_ID" "$cf_zone_id"
    fi
  else
    echo "⚠️  Cloudflare Zone ID left unchanged"
  fi
  
  # CF Tunnel ID
  read -p "Enter your Cloudflare Tunnel ID: " cf_tunnel_id
  if [ ! -z "$cf_tunnel_id" ]; then
    # Basic validation for Tunnel ID format (UUID)
    if [[ "$cf_tunnel_id" =~ ^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$ ]]; then
      update_env_var "CF_TUNNEL_ID" "$cf_tunnel_id"
      echo "✅ Cloudflare Tunnel ID updated"
      
      # Create tunnel configuration with the provided tunnel ID
      create_tunnel_config "$domain_name" "$cf_tunnel_id"
    else
      echo "⚠️  Warning: Tunnel ID format seems incorrect (should be UUID format)"
      update_env_var "CF_TUNNEL_ID" "$cf_tunnel_id"
      
      # Still create the config file even with potentially incorrect format
      create_tunnel_config "$domain_name" "$cf_tunnel_id"
    fi
  else
    echo "⚠️  Cloudflare Tunnel ID left unchanged"
    # Create template config without tunnel ID
    create_tunnel_config "$domain_name" "\${CF_TUNNEL_ID}"
  fi
  
  echo ""
  echo "Cloudflare configuration completed!"
  echo "You can now run './add-cname-records.sh' to set up DNS records."
  
  # Show tunnel setup instructions
  show_tunnel_instructions "$domain_name"
else
  echo "Skipping Cloudflare configuration. You can run this script again later to configure it."
  # Still create a template tunnel config
  echo ""
  read -p "Do you want to create a template tunnel configuration anyway? [Y/n]: " create_template
  if [[ ! "$create_template" =~ ^[Nn]$ ]]; then
    create_tunnel_config "$domain_name" "\${CF_TUNNEL_ID}"
    echo "Template tunnel configuration created. Update CF_TUNNEL_ID in .env and regenerate if needed."
  fi
fi

# Update the site_url in mkdocs.yml
echo -e "\nUpdating site_url in mkdocs.yml..."
update_mkdocs_yml "$domain_name"

# Update service URLs in services.yaml
echo -e "\nUpdating service URLs in services.yaml..."
update_services_yaml "$domain_name"

# Update the login URL in main.html
echo -e "\nUpdating login URL in main.html..."
update_main_html "$domain_name"

# Listmonk Admin Credentials configuration
echo -e "\n---- Listmonk Admin Credentials ----"
read -p "Enter Listmonk admin email/username [default: admin@example.com]: " listmonk_user
read -sp "Enter Listmonk admin password [default: changeMe]: " listmonk_password
echo # Add new line after password input

if [ -z "$listmonk_user" ]; then
  listmonk_user="admin@example.com"
fi

if [ -z "$listmonk_password" ]; then
  listmonk_password="changeMe"
fi

update_env_var "LISTMONK_ADMIN_USER" "$listmonk_user"
update_env_var "LISTMONK_ADMIN_PASSWORD" "$listmonk_password"

echo "Listmonk admin credentials updated."

# N8N User Credentials configuration
echo -e "\n---- N8N Admin Credentials ----"
read -p "Enter N8N admin email [default: admin@example.com]: " n8n_email
read -sp "Enter N8N admin password [default: changeMe]: " n8n_password
echo # Add new line after password input

if [ -z "$n8n_email" ]; then
  n8n_email="admin@example.com"
fi

if [ -z "$n8n_password" ]; then
  n8n_password="changeMe"
fi

update_env_var "N8N_USER_EMAIL" "$n8n_email"
update_env_var "N8N_USER_PASSWORD" "$n8n_password"

echo "N8N admin credentials updated."

# Generate secure passwords for database and encryption
echo -e "\n---- Generating Secure Passwords ----"
echo "Generating secure passwords for database and encryption keys..."

# Generate and update database password
postgres_password=$(generate_password 20)
update_env_var "POSTGRES_PASSWORD" "$postgres_password"

# Generate and update N8N encryption key
n8n_encryption_key=$(generate_password 32)
update_env_var "N8N_ENCRYPTION_KEY" "$n8n_encryption_key"

# Generate and update NocoDB passwords
nocodb_jwt_secret=$(generate_password 32)
update_env_var "NOCODB_JWT_SECRET" "$nocodb_jwt_secret"

nocodb_db_password=$(generate_password 20)
update_env_var "NOCODB_DB_PASSWORD" "$nocodb_db_password"

# Generate and update Gitea passwords
gitea_db_password=$(generate_password 20)
update_env_var "GITEA_DB_PASSWD" "$gitea_db_password"

gitea_db_root_password=$(generate_password 20)
update_env_var "GITEA_DB_ROOT_PASSWORD" "$gitea_db_root_password"

echo "Secure passwords generated and updated."

echo -e "\n✅ Configuration completed successfully!"
echo "Your .env file has been configured with:"
echo "- Domain: $domain_name"
echo "- Listmonk Admin: $listmonk_user"
echo "- N8N Admin Email: $n8n_email"
echo "- Secure random passwords for database, encryption, and NocoDB"
if [[ ! "$configure_cf" =~ ^[Nn]$ ]]; then
  echo "- Cloudflare credentials for DNS management"
fi
echo -e "\nYour .env file is located at: $ENV_FILE"
echo "A backup of your original .env file was created before modifications."
echo -e "\nNext steps:"
echo "1. Run 'docker-compose up -d' to start your services"
if [[ ! "$configure_cf" =~ ^[Nn]$ ]]; then
  echo "2. Run './add-cname-records.sh' to set up DNS records and access policies"
fi