const { Client } = require('ssh2');

const config = {
  host: 'hs.yifenbao.cn',
  port: 22,
  username: 'root',
  password: 'Torch1112'
};

const conn = new Client();

conn.on('ready', async () => {
  console.log('SSH连接成功');
  
  try {
    console.log('\n=== 检查SSL证书目录 ===');
    await executeCommand('ls -la /www/server/panel/vhost/cert/');
    
    console.log('\n=== 检查是否有hs.yifenbao.cn证书 ===');
    await executeCommand('ls -la /www/server/panel/vhost/cert/hs.yifenbao.cn/ 2>/dev/null || echo "没有hs.yifenbao.cn证书"');
    
    console.log('\n=== 配置HTTP和HTTPS ===');
    const configContent = `server {
    listen 80;
    server_name hs.yifenbao.cn;

    location /h5/ {
        proxy_pass http://127.0.0.1:4001/h5/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /api/ {
        proxy_pass http://127.0.0.1:4001/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

server {
    listen 443 ssl;
    server_name hs.yifenbao.cn;

    ssl_certificate /www/server/panel/vhost/cert/hs.yifenbao.cn/fullchain.pem;
    ssl_certificate_key /www/server/panel/vhost/cert/hs.yifenbao.cn/privkey.pem;

    location /h5/ {
        proxy_pass http://127.0.0.1:4001/h5/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /api/ {
        proxy_pass http://127.0.0.1:4001/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}
`;
    
    await executeCommand(`cat > /www/server/panel/vhost/nginx/hs.yifenbao.cn.conf << 'EOF'
${configContent}
EOF`);
    
    console.log('\n=== 创建自签名证书 ===');
    await executeCommand('mkdir -p /www/server/panel/vhost/cert/hs.yifenbao.cn');
    await executeCommand('openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /www/server/panel/vhost/cert/hs.yifenbao.cn/privkey.pem -out /www/server/panel/vhost/cert/hs.yifenbao.cn/fullchain.pem -subj "/CN=hs.yifenbao.cn"');
    
    console.log('\n=== 测试配置 ===');
    await executeCommand('/www/server/nginx/sbin/nginx -t');
    
    console.log('\n=== 重新加载Nginx ===');
    await executeCommand('/www/server/nginx/sbin/nginx -s reload');
    
    console.log('\n=== 测试HTTPS访问 ===');
    await executeCommand('curl -s -k https://hs.yifenbao.cn/h5/ | head -5');
    
  } catch (error) {
    console.error('配置失败:', error.message);
  } finally {
    conn.end();
  }
});

function executeCommand(cmd) {
  return new Promise((resolve) => {
    conn.exec(cmd, (err, stream) => {
      if (err) {
        console.error('命令执行错误:', err.message);
        resolve();
        return;
      }
      
      stream.stdout.on('data', (data) => process.stdout.write(data));
      stream.stderr.on('data', (data) => process.stdout.write(data));
      
      stream.on('close', () => resolve());
    });
  });
}

conn.on('error', (err) => {
  console.error('SSH连接错误:', err.message);
});

conn.connect(config);