import assert from 'node:assert/strict';
import fs from 'node:fs/promises';
import path from 'node:path';
import test from 'node:test';

const root = path.resolve(import.meta.dirname, '..');

async function nginxConfig() {
  return fs.readFile(path.join(root, 'nginx/wegwichtel.conf'), 'utf8');
}

function activeLines(config) {
  return config
    .split(/\r?\n/)
    .map(line => line.trim())
    .filter(line => line && !line.startsWith('#'));
}

test('nginx listens actively on HTTP while SSL remains a commented template', async () => {
  const config = await nginxConfig();

  assert.match(config, /listen 80;\s*\n\s*listen \[::\]:80;\s*\n\s*# listen 443 ssl;\s*\n\s*# listen \[::\]:443 ssl;/);
  assert.match(config, /server_name wegwichtel\.de www\.wegwichtel\.de;[\s\S]*# ssl_certificate\s+\/etc\/nginx\/ssl\/snakeoil\.pem;/);
  assert.match(config, /# ssl_certificate_key\s+\/etc\/nginx\/ssl\/snakeoil\.key;/);
  assert.match(config, /# ssl_protocols TLSv1\.2 TLSv1\.3;/);

  const active = activeLines(config).join('\n');
  assert.doesNotMatch(active, /listen (?:\[::\]:)?443\b/);
  assert.doesNotMatch(active, /^ssl_/m);
  assert.doesNotMatch(active, /https:\/\//);
});

test('nginx keeps reverse-proxy, upload and forwarding settings in the HTTP server block', async () => {
  const config = await nginxConfig();

  assert.match(config, /proxy_pass\s+http:\/\/127\.0\.0\.1:47145;/);
  assert.match(config, /client_max_body_size\s+64m;/);
  assert.match(config, /proxy_request_buffering\s+off;/);
  assert.match(config, /proxy_set_header\s+Host\s+\$host;/);
  assert.match(config, /proxy_set_header\s+X-Real-IP\s+\$remote_addr;/);
  assert.match(config, /proxy_set_header\s+X-Forwarded-For\s+\$proxy_add_x_forwarded_for;/);
  assert.match(config, /proxy_set_header\s+X-Forwarded-Proto\s+\$scheme;/);
  assert.match(config, /proxy_connect_timeout\s+10s;/);
  assert.match(config, /proxy_send_timeout\s+120s;/);
  assert.match(config, /proxy_read_timeout\s+120s;/);
});