setup.sh

#!/bin/bash
#===============================================================================
# Pi-hole Docker Setup Script
# Automatically sets up Pi-hole with monitoring stack on any Linux machine
#===============================================================================

set -e

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

print_header() {
    echo -e "${BLUE}"
    echo "╔═══════════════════════════════════════════════════════════════════╗"
    echo "║                    Pi-hole Docker Setup                           ║"
    echo "║         DNS Ad-Blocking with Monitoring Stack                     ║"
    echo "╚═══════════════════════════════════════════════════════════════════╝"
    echo -e "${NC}"
}

print_step() {
    echo -e "${GREEN}[✓]${NC} $1"
}

print_warning() {
    echo -e "${YELLOW}[!]${NC} $1"
}

print_error() {
    echo -e "${RED}[✗]${NC} $1"
}

# Get the directory where this script is located
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"

print_header

#===============================================================================
# Step 1: Check Prerequisites
#===============================================================================
echo -e "\n${BLUE}[1/7] Checking prerequisites...${NC}"

# Check if Docker is installed
if ! command -v docker &> /dev/null; then
    print_error "Docker is not installed. Please install Docker first."
    echo "  For Arch Linux: sudo pacman -S docker docker-compose"
    echo "  Then: sudo systemctl enable --now docker"
    exit 1
fi
print_step "Docker is installed"

# Check if Docker is running
if ! docker info &> /dev/null; then
    print_error "Docker is not running. Please start Docker."
    echo "  Run: sudo systemctl start docker"
    exit 1
fi
print_step "Docker is running"

# Check if user is in docker group
if ! groups | grep -q docker; then
    print_warning "User is not in docker group. You may need to use sudo."
fi

#===============================================================================
# Step 2: Detect Local IP
#===============================================================================
echo -e "\n${BLUE}[2/7] Detecting network configuration...${NC}"

# Get local IP address
LOCAL_IP=$(ip -4 addr show | grep -oP '(?<=inet\s)192\.168\.\d+\.\d+' | head -1)
if [ -z "$LOCAL_IP" ]; then
    LOCAL_IP=$(ip -4 addr show | grep -oP '(?<=inet\s)10\.\d+\.\d+\.\d+' | head -1)
fi
if [ -z "$LOCAL_IP" ]; then
    LOCAL_IP=$(hostname -I | awk '{print $1}')
fi

if [ -z "$LOCAL_IP" ]; then
    print_error "Could not detect local IP address"
    read -p "Enter your local IP address: " LOCAL_IP
fi
print_step "Local IP: $LOCAL_IP"

# Get public IP for WireGuard
PUBLIC_IP=$(curl -s --max-time 5 ifconfig.me 2>/dev/null || echo "")
if [ -n "$PUBLIC_IP" ]; then
    print_step "Public IP: $PUBLIC_IP"
fi

#===============================================================================
# Step 3: Create Environment File
#===============================================================================
echo -e "\n${BLUE}[3/7] Creating configuration...${NC}"

# Create .env.pihole
cat > .env.pihole << EOF
# Pi-hole v6 Configuration
# Generated by setup.sh on $(date)
TZ=${TZ:-America/New_York}
FTLCONF_webserver_api_password=
FTLCONF_dns_listeningMode=all
EOF
print_step "Created .env.pihole"

#===============================================================================
# Step 4: Generate TLS Certificates
#===============================================================================
echo -e "\n${BLUE}[4/7] Generating TLS certificates...${NC}"

if [ ! -f "certs/tls.pem" ]; then
    chmod +x generate-certs.sh
    ./generate-certs.sh
    print_step "Generated TLS certificates"
else
    print_step "TLS certificates already exist"
fi

#===============================================================================
# Step 5: Create Docker Network
#===============================================================================
echo -e "\n${BLUE}[5/7] Setting up Docker network...${NC}"

docker network create pihole_network 2>/dev/null || true
print_step "Docker network ready"

#===============================================================================
# Step 6: Start Services
#===============================================================================
echo -e "\n${BLUE}[6/7] Starting Pi-hole stack...${NC}"

docker compose -f compose.monitoring.yaml up -d

# Wait for Pi-hole to be healthy
echo "Waiting for Pi-hole to be healthy..."
for i in {1..60}; do
    status=$(docker inspect --format='{{.State.Health.Status}}' pihole 2>/dev/null || echo "starting")
    if [ "$status" = "healthy" ]; then
        print_step "Pi-hole is healthy"
        break
    fi
    sleep 2
done

#===============================================================================
# Step 7: Update Gravity (Blocklists)
#===============================================================================
echo -e "\n${BLUE}[7/7] Downloading blocklists...${NC}"

# Add additional blocklists if not already present
echo "Adding recommended blocklists..."

# Check if blocklists are already added
LISTS_COUNT=$(docker exec pihole curl -s "http://localhost/api/lists?type=block" 2>/dev/null | python3 -c "import sys,json; print(len(json.load(sys.stdin).get('lists',[])))" 2>/dev/null || echo "0")

if [ "$LISTS_COUNT" -lt "5" ]; then
    # Add top blocklists
    BLOCKLISTS=(
        "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/pro.txt|Hagezi Pro"
        "https://big.oisd.nl/domainswild|OISD Big"
        "https://v.firebog.net/hosts/AdguardDNS.txt|AdGuard DNS"
        "https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext|Peter Lowe List"
        "https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt|WindowsSpyBlocker"
        "https://o0.pages.dev/Lite/hosts.txt|1Hosts Lite"
        "https://v.firebog.net/hosts/static/w3kbl.txt|Firebog Suspicious"
        "https://raw.githubusercontent.com/d3ward/toolz/master/src/d3host.txt|d3Host List"
    )

    for item in "${BLOCKLISTS[@]}"; do
        url="${item%%|*}"
        comment="${item##*|}"
        docker exec pihole curl -s -X POST "http://localhost/api/lists?type=block" \
            -H "Content-Type: application/json" \
            -d "{\"address\":\"$url\",\"comment\":\"$comment\"}" > /dev/null 2>&1
    done
    print_step "Added recommended blocklists"
fi

# Update gravity
echo "Updating gravity database (this may take a few minutes)..."
docker exec pihole pihole -g

# Get final count
GRAVITY_COUNT=$(docker exec pihole curl -s "http://localhost/api/stats/summary" 2>/dev/null | python3 -c "import sys,json; print(json.load(sys.stdin).get('gravity',{}).get('domains_being_blocked',0))" 2>/dev/null || echo "unknown")
print_step "Gravity updated: $GRAVITY_COUNT domains blocked"

#===============================================================================
# Print Summary
#===============================================================================
echo -e "\n${GREEN}"
echo "╔═══════════════════════════════════════════════════════════════════╗"
echo "║                    Setup Complete!                                 ║"
echo "╚═══════════════════════════════════════════════════════════════════╝"
echo -e "${NC}"

echo -e "${BLUE}Services:${NC}"
echo "  Pi-hole Admin:  http://$LOCAL_IP/admin"
echo "  Pi-hole HTTPS:  https://$LOCAL_IP:8443/admin"
echo "  Grafana:        http://$LOCAL_IP:3000 (admin/admin123)"
echo "  Prometheus:     http://$LOCAL_IP:9090"

echo -e "\n${BLUE}DNS Configuration:${NC}"
echo "  Set your router/device DNS to: $LOCAL_IP"

echo -e "\n${BLUE}To configure this machine to use Pi-hole:${NC}"
echo "  sudo bash -c 'chattr -i /etc/resolv.conf 2>/dev/null; echo \"nameserver $LOCAL_IP\" > /etc/resolv.conf; chattr +i /etc/resolv.conf'"

if [ -n "$PUBLIC_IP" ]; then
    echo -e "\n${BLUE}For remote access (WireGuard VPN):${NC}"
    echo "  Run: sudo bash setup-wireguard.sh"
    echo "  Your public IP: $PUBLIC_IP"
fi

echo -e "\n${BLUE}Useful commands:${NC}"
echo "  View logs:      docker compose -f compose.monitoring.yaml logs -f"
echo "  Restart:        docker compose -f compose.monitoring.yaml restart"
echo "  Update gravity: docker exec pihole pihole -g"
echo "  Stop all:       docker compose -f compose.monitoring.yaml down"

echo ""