#!/bin/bash

set -e

SQUID_CONF="/etc/squid/squid.conf"

echo "=============================="
echo "🔄 Updating system..."
echo "=============================="
apt update -y

echo "=============================="
echo "⬇️ Installing Squid (if not installed)..."
echo "=============================="
if ! command -v squid >/dev/null 2>&1; then
  wget -O squid-install.sh https://raw.githubusercontent.com/serverok/squid-proxy-installer/master/squid3-install.sh
  bash squid-install.sh
else
  echo "✅ Squid already installed"
fi

echo "=============================="
echo "🧾 Backup squid.conf"
echo "=============================="
cp $SQUID_CONF ${SQUID_CONF}.backup.$(date +%F-%H%M)

echo "=============================="
echo "🧹 Cleaning old ports"
echo "=============================="
sed -i '/^http_port/d' $SQUID_CONF

echo "=============================="
echo "🔧 Setting port 3128"
echo "=============================="
cat <<EOF >> $SQUID_CONF

# ===== SINGLE PORT PROXY =====
http_port 3128
EOF

echo "=============================="
echo "🔁 Restarting Squid"
echo "=============================="
systemctl restart squid
sleep 2

echo "=============================="
echo "📊 Checking listening ports"
echo "=============================="
ss -lntp | grep squid || {
  echo "❌ Squid not listening. Exiting."
  exit 1
}

echo "=============================="
echo "🔥 Opening firewall port 3128"
echo "=============================="
ufw allow 3128 || true
ufw reload || true

echo "=============================="
echo "👤 ADD PROXY USER NOW"
echo "=============================="
echo "👉 Username aur Password puchha jayega"
squid-add-user

echo "=============================="
echo "✅ SETUP COMPLETE"
echo "=============================="
echo "📌 Proxy format: IP:3128:username:password"