const { Client } = require('ssh2');

const conn = new Client();

const newConfig = `server {
    listen 80;
    server_name hs.yifenbao.cn;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name hs.yifenbao.cn;

    ssl_certificate /www/server/panel/vhost/cert/hs.yifenbao.cn/fullchain.pem;
    ssl_certificate_key /www/server/panel/vhost/cert/hs.yifenbao.cn/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:4001/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        add_header Vary User-Agent;
    }

    location /api/ {
        proxy_pass http://127.0.0.1:4000/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}
`;

conn.on('ready', () => {
  console.log('=== 备份原始配置 ===');
  
  conn.exec('cp /www/server/panel/vhost/nginx/hs.yifenbao.cn.conf /www/server/panel/vhost/nginx/hs.yifenbao.cn.conf.bak', (err) => {
    if (err) console.log('备份失败:', err);
    
    console.log('\n=== 上传新配置 ===');
    
    conn.sftp((err2, sftp) => {
      if (err2) { console.log('SFTP ERR:', err2); conn.end(); return; }
      
      const writeStream = sftp.createWriteStream('/www/server/panel/vhost/nginx/hs.yifenbao.cn.conf');
      writeStream.write(newConfig);
      writeStream.end();
      
      writeStream.on('close', () => {
        sftp.end();
        console.log('配置上传成功');
        
        console.log('\n=== 重启系统级Nginx ===');
        conn.exec('/www/server/nginx/sbin/nginx -s reload', (err3, stream3) => {
          if (err3) { console.log('ERR3:', err3); conn.end(); return; }
          stream3.on('data', (d) => process.stdout.write(d.toString()));
          stream3.on('close', () => {
            setTimeout(() => {
              console.log('\n=== 测试HTTPS ===');
              conn.exec('curl -sL https://hs.yifenbao.cn/ | head -5', (err4, stream4) => {
                if (err4) { console.log('ERR4:', err4); conn.end(); return; }
                stream4.on('data', (d) => console.log(d.toString()));
                stream4.on('close', () => {
                  console.log('\n=== 测试HTTPS资源 ===');
                  conn.exec('curl -s -o /dev/null -w "%{http_code}" https://hs.yifenbao.cn/assets/index-Cs60smgB.js', (err5, stream5) => {
                    if (err5) { console.log('ERR5:', err5); conn.end(); return; }
                    stream5.on('data', (d) => console.log('HTTPS JS状态码:', d.toString().trim()));
                    stream5.on('close', () => {
                      console.log('\n✅ 修复完成！');
                      conn.end();
                    });
                  });
                });
              });
            }, 3000);
          });
        });
      });
    });
  });
});

conn.connect({ host: 'hs.yifenbao.cn', port: 22, username: 'root', password: 'Torch1112' });