#!/bin/bash
# postinst script for imunify360-firewall

set -e

case "$1" in
    configure)
        /bin/systemctl daemon-reload >/dev/null
        # will be enabled later, during imunify agent registration
        #/bin/systemctl disable imunify360.service >/dev/null 2>&1 || :
        # check if CSF is installed
        if /opt/imunify360/venv/share/imunify360/scripts/csf_tool status >/dev/null
        then
            echo -n "Adding Imunify360 to CSF exceptions..."
            /opt/imunify360/venv/share/imunify360/scripts/csf_tool coop_install && echo OK
        fi

        # catch up with our active response and ossec.conf
        /bin/systemctl restart ossec-hids >/dev/null

        /bin/systemctl enable imunify360.service >/dev/null
        /bin/systemctl enable imunify360-agent.service >/dev/null
        /bin/systemctl enable imunify360-agent.socket >/dev/null
        /bin/systemctl enable imunify360-agent-user.socket >/dev/null
        /bin/systemctl start imunify360-agent.socket >/dev/null
        /bin/systemctl start imunify360-agent-user.socket >/dev/null
        /bin/systemctl start imunify360.service >/dev/null

        chmod 01777 /var/imunify360/tmp_modsec
        chmod 0755 /var/imunify360/dbscan
        chmod 0700 /var/imunify360/dbscan/run
        chmod 0700 /var/imunify360/dbscan/run/scan
        chmod 0700 /var/imunify360/dbscan/run/clean
        chmod 0700 /var/imunify360/dbscan/run/restore
        chmod 01777 /var/imunify360/aibolit/resident/in/upload-jobs
        chmod 0600 /opt/imunify360/venv/share/imunify360/10_on_first_install_ids.config
        chmod 0600 /opt/imunify360/venv/share/imunify360/11_on_first_install_cloudways.config
        chmod 0600 /opt/imunify360/venv/share/imunify360/20-low-mem-settings.config
        chmod 0644 /opt/imunify360/venv/share/imunify360/imunify360-ual.cron.template

        if [ -f /etc/sysconfig/imunify360/imunify360.config.d/11_on_first_install_cloudways.config ]; then
           cp -af /opt/imunify360/venv/share/imunify360/11_on_first_install_cloudways.config /etc/sysconfig/imunify360/imunify360.config.d/11_on_first_install_cloudways.config
        fi

        chown root:root /var/imunify360/aibolit/resident/in/upload-jobs
        chown root:root /opt/imunify360/venv/share/imunify360/10_on_first_install_ids.config
        chown root:root /opt/imunify360/venv/share/imunify360/11_on_first_install_cloudways.config

        chown root:root /var/imunify360/tmp_modsec
        chown root:root /var/imunify360/dbscan
        chown root:root /var/imunify360/dbscan/run
        chown root:root /var/imunify360/dbscan/run/scan
        chown root:root /var/imunify360/dbscan/run/clean
        chown root:root /var/imunify360/dbscan/run/restore
        # remove imunify360-transaction-in-progress flag if it exists
        rm -f /var/lib/rpm-state/imunify360-transaction-in-progress 2>/dev/null || :
    ;;

    triggered)
        # imunify-antivirus-changed; imunify-core-changed; imunify360-venv-changed...
        /bin/systemctl restart imunify360.service >/dev/null
        /bin/systemctl restart imunify360-agent.service >/dev/null
        /bin/systemctl restart imunify360-dos-protection.service >/dev/null
    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;

esac

exit 0