02firstboot = $(CHROOT)/usr/local/bin/02firstboot.start
cert-renew.sh = $(CHROOT)/etc/ssl/cert-renew.sh
zabbix-userparameter = $(CHROOT)/var/lib/zabbix/userparameter_mysql.conf

systemd-units: appliance/MySQL-Backup.sh appliance/backup.service appliance/backup.timer appliance/cert-renew.service appliance/cert-renew.timer
	mkdir -p $(CHROOT)/usr/local/bin
	cp appliance/MySQL-Backup.sh $(CHROOT)/usr/local/bin/
	cp appliance/backup.service appliance/backup.timer appliance/cert-renew.service appliance/cert-renew.timer $(CHROOT)/etc/systemd/system/

$(02firstboot): appliance/02firstboot.start
	mkdir -p $(CHROOT)/usr/local/bin
	cp $< $@
	touch $(CHROOT)/02firstboot

$(cert-renew.sh): appliance/cert-renew.sh
	mkdir -p $(CHROOT)/etc/ssl
	cp $< $@

$(CHROOT)/var/lib/mysql: mariadb/my.cnf.root
	# MariaDB-Konfiguration ($$, weil make ein $ entfernt)
	sed -i "s/^character-set-server.*$$/character-set-server = utf8mb4/" $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	sed -iE 's/^\(log-bin\)/#\1/' $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	echo >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	echo "# innodb tuning" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	echo "innodb_buffer_pool_size = 2G" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	echo "innodb_strict_mode = OFF" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf
	cp mariadb/my.cnf.root $(CHROOT)/root/.my.cnf
	chmod 0600 $(CHROOT)/root/.my.cnf
	rm -rf $(CHROOT)/var/lib/mysql/*
	RUN bash -c 'yes gentoo | emerge --config dev-db/mariadb'

apache-php:
	sed -i 's:APACHE2_OPTS=\":APACHE2_OPTS=\"-D PHP :' $(CHROOT)/etc/conf.d/apache2
	find $(CHROOT)/etc/php/apache2-*/ -iname php.ini -print | xargs \sed -i \
		-e 's:.*date.timezone =.*:date.timezone = Europe/Berlin:' \
		-e 's:.*pcre.jit=.*:pcre.jit=0:' \
		-e 's:.*max_execution_time =.*:max_execution_time = 300:' \
		-e 's:.*max_input_time =.*:max_input_time = 300:' \
		-e 's:.*post_max_size =.*:post_max_size = 16M:' \
		-e 's:.*always_populate_raw_post_data =.*:always_populate_raw_post_data = -1:'

zabbix-services:
	echo "zabbix-agent 10050/tcp Zabbix Agent" >> $(CHROOT)/etc/services
	echo "zabbix-agent 10050/udp Zabbix Agent" >> $(CHROOT)/etc/services
	echo "zabbix-trapper 10051/tcp Zabbix Trapper" >> $(CHROOT)/etc/services
	echo "zabbix-trapper 10051/udp Zabbix Trapper" >> $(CHROOT)/etc/services

zabbix-webapp:
	RUN webapp-config -h localhost -d zabbix -I zabbix `ls $(CHROOT)/usr/share/webapps/zabbix`
	cp $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php.example $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php
	# enable any language
	sed -i "s:'display' => false]:'display' => true]:" $(CHROOT)/var/www/localhost/htdocs/zabbix/include/locales.inc.php
	# im Zabbix-Ebuild wird fowners und fperms vor webapp_src_install aufgerufen und deswegen wieder überschrieben
	RUN chown -R zabbix:zabbix \
		/etc/zabbix \
		/var/lib/zabbix \
		/var/lib/zabbix/home \
		/var/lib/zabbix/scripts \
		/var/lib/zabbix/alertscripts \
		/var/lib/zabbix/externalscripts \
		/var/log/zabbix
	chmod 0750 \
		$(CHROOT)/etc/zabbix \
		$(CHROOT)/var/lib/zabbix \
		$(CHROOT)/var/lib/zabbix/home \
		$(CHROOT)/var/lib/zabbix/scripts \
		$(CHROOT)/var/lib/zabbix/alertscripts \
		$(CHROOT)/var/lib/zabbix/externalscripts \
		$(CHROOT)/var/log/zabbix

$(zabbix-userparameter): zabbix/userparameter_mysql.conf
	mkdir -p $(CHROOT)/var/lib/zabbix
	cp $< $@

zabbix-syslog:
	# Zabbix Syslog (https://github.com/v-zhuravlev/zabbix-syslog)
	mkdir -p $(CHROOT)/etc/zabbix/scripts/lib
	cp zabbix/zabbix-syslog/zabbix_syslog_create_urls.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl
	cp zabbix/zabbix-syslog/zabbix_syslog_lkp_host.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl
	cp zabbix/zabbix-syslog/zabbix_syslog.cfg $(CHROOT)/etc/zabbix/zabbix_syslog.cfg
	cp zabbix/zabbix-syslog/lib/ZabbixAPI.pm $(CHROOT)/etc/zabbix/scripts/lib/ZabbixAPI.pm
	cp zabbix/zabbix-syslog/70-zabbix_rsyslog.conf $(CHROOT)/etc/rsyslog.d/70-zabbix_rsyslog.conf
	RUN chown -R zabbix:zabbix /etc/zabbix/scripts
	chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl
	chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl

fping:
	chmod u=rwsx,g=rx,o=rx $(CHROOT)/usr/sbin/fping
	chmod u=rwsx,g=rx,o=rx $(CHROOT)/usr/sbin/fping6

snmp:
	cp snmp/snmpd.conf $(CHROOT)/etc/snmp/snmpd.conf
	cp snmp/snmptrapd.conf $(CHROOT)/etc/snmp/snmptrapd.conf
	cp snmp/snmptt.conf $(CHROOT)/etc/snmp/snmptt.conf
	sed -i \
		-e 's:net_snmp_perl_enable = 0:net_snmp_perl_enable = 1:' \
		-e 's:translate_integers = 1:translate_integers = 0:' \
		-e 's:#mibs_environment = ALL:mibs_environment = ALL:' \
		-e 's.#date_time_format =.date_time_format = %H:%M:%S %Y/%m/%d.' \
		-e 's:daemon_uid = snmptt:daemon_uid = zabbix:' \
		-e 's:log_system_enable = 0:log_system_enable = 1:' \
		-e 's:unknown_trap_log_enable = 0:unknown_trap_log_enable = 1:' \
		$(CHROOT)/etc/snmp/snmptt.ini
	mkdir -p $(CHROOT)/var/log/snmptt
	chmod 0775 $(CHROOT)/var/log/snmptt
	RUN chown zabbix:zabbix /var/log/snmptt

preinstall:

postinstall: systemd-units $(02firstboot) $(cert-renew.sh) $(CHROOT)/var/lib/mysql apache-php zabbix-services zabbix-webapp $(zabbix-userparameter) zabbix-syslog fping snmp