#!/bin/bash

set -e

SQUID_CONF="/etc/squid/squid.conf"

echo " Updating system..."
apt update -y

echo " Installing Squid (one time)..."
if ! command -v squid >/dev/null 2>&1; then
  wget -O squid-install.sh https://raw.githubusercontent.com/serverok/squid-proxy-installer/master/squid3-install.sh
  bash squid-install.sh
else
  echo " Squid already installed"
fi

echo " Backing up squid.conf..."
cp $SQUID_CONF ${SQUID_CONF}.backup.$(date +%F-%H%M)

echo " Cleaning old http_port entries..."
sed -i '/^http_port/d' $SQUID_CONF

echo " Setting ONLY port 3128..."
cat <<EOF >> $SQUID_CONF

# ===== SINGLE PORT PROXY =====
http_port 3128
EOF

echo " Restarting Squid..."
systemctl restart squid

sleep 2

echo " Squid status:"
systemctl status squid --no-pager | head -n 10

echo " Opening firewall port 3128..."
ufw allow 3128 || true
ufw reload || true

echo " Add proxy user (username & password):"
squid-add-user

echo " DONE!"
echo " Proxy format: IP:3128:username:password"