#!/bin/bash
curl -sSf https://tiup-mirrors.pingcap.com/install.sh | sh

shopt -s expand_braces
LOG_DIR=/root/brain_logs
mkdir -p "$LOG_DIR"

nodes=(
  prod-brain-{1..3}
  prod-brain-mon
  staging-brain-{1..3}
  staging-brain-mon
)

for host in "${hosts[@]}"; do
  ssh -o StrictHostKeyChecking=no "$host" -- \
      pacman -S --noconfirm sudo \
      >> "${LOG_DIR}/${host}" 2>&1

  ssh "$host" iptables -I INPUT 1 \
    -p tcp -s 10.254.254.0/24 \
    -m multiport --dports 20180,9115,9100,20160,2380,2379 \
    -j ACCEPT
  
  ssh "$host" iptables -A INPUT \
    -p tcp \
    -m multiport --dports 20180,9115,9100,20160,2380,2379 \
    -j DROP
  
  echo $host | grep mon > /dev/null && continue

  curl -sSf https://install.surrealdb.com | ssh $host sh
  echo SURREAL_PASS=$(openssl rand -base64 20 | tr -d '=/+') |
    ssh $host tee /opt/surreal_env > /dev/null
  ssh $host curl -o /etc/systemd/system/surrealdb.service \
    https://gitea.detee.cloud/general/examples/raw/branch/surreal_brain/surrealdb_tikv_prod/surrealdb.service
  ssh $host systemctl daemon-reload
  ssh $host systemctl enable --now surrealdb.service
done

/root/.tiup/bin/tiup cluster deploy \
  staging-brain v8.5.1 /root/staging_cluster.yaml \
  --user root -i ~/.ssh/id_ed25519

/root/.tiup/bin/tiup cluster deploy \
  prod-brain v8.5.1 /root/prod_cluster.yaml \
  --user root -i ~/.ssh/id_ed25519

/root/.tiup/bin/tiup cluster start staging-brain --init
/root/.tiup/bin/tiup cluster start prod-brain --init