#!/bin/bash

# Setup the ssl_cert directory
if [ ! -d /etc/squid4/ssl_cert ]; then
    mkdir /etc/squid4/ssl_cert
fi

chown -R proxy:proxy /etc/squid4
chmod 700 /etc/squid4/ssl_cert

# Setup the squid cache directory
if [ ! -d /var/cache/squid4 ]; then
    mkdir -p /var/cache/squid4
fi
chown -R proxy: /var/cache/squid4
chmod -R 750 /var/cache/squid4

if [ ! -z $MITM_KEY ]; then
    echo "Copying $MITM_KEY as MITM key..."
    cp $MITM_KEY /etc/squid4/ssl_cert/mitm.pem
    chown root:proxy /etc/squid4/ssl_cert/mitm.pem
fi

if [ ! -z $MITM_CERT ]; then
    echo "Copying $MITM_CERT as MITM CA..."
    cp $MITM_CERT /etc/squid4/ssl_cert/mitm.crt
    chown root:proxy /etc/squid4/ssl_cert/mitm.crt
fi

if [ -z $MITM_CERT ] || [ -z $MITM_KEY ]; then
    echo "Must specify $MITM_CERT AND $MITM_KEY." 1>&2
    exit 1
fi

chown proxy: /dev/stdout
chown proxy: /dev/stderr

# Initialize the certificates database
/usr/libexec/security_file_certgen -c -s /var/lib/ssl_db
chown -R proxy: /var/lib/ssl_db

#ssl_crtd -c -s
#ssl_db

# Set the configuration
p2 -t /squid.conf.p2 > /etc/squid4/squid.conf

# Parse the cache peer lines from the environment and add them to the
# configuration
echo '# CACHE PEERS FROM DOCKER' >> /etc/squid4/squid.conf
env | grep 'CACHE_PEER' | sort | while read cacheline; do
    echo "# $cacheline " >> /etc/squid4/squid.conf
    echo "cache_peer ${!cacheline}" >> /etc/squid4/squid.conf
done

squid -z -N
squid -N