# cookbooks/mysql/default.rb

mysql = node['mysql']

package 'mysql-server' do
  action :install
end

group 'mysql' do
  gid 3306
end

user 'mysql' do
  uid 3306
  gid 3306
  home mysql['data_dir']
  shell '/usr/sbin/nologin'
  system_user true
end

directory mysql['data_dir'] do
  owner 'mysql'
  group 'mysql'
  mode '0750'
end

directory mysql['backup_dir'] do
  owner 'mysql'
  group 'mysql'
  mode '0750'
end

directory '/var/log/mysql' do
  owner 'mysql'
  group 'mysql'
  mode '0750'
end

template '/etc/mysql/mysql.conf.d/mysqld.cnf' do
  source 'templates/mysqld.cnf.erb'
  owner 'root'
  group 'root'
  mode '0644'
  variables(
    port: mysql['port'],
    bind_address: mysql['bind_address'],
    data_dir: mysql['data_dir'],
    innodb_buffer_pool_size: mysql['innodb_buffer_pool_size'],
    max_connections: mysql['max_connections'],
    slow_query_log: mysql['slow_query_log'],
    slow_query_time: mysql['slow_query_time']
  )
  notifies :restart, 'service[mysql]'
end

# Create application database and user
execute "create-db-#{mysql['db_name']}" do
  command "mysql -u root -e \"CREATE DATABASE IF NOT EXISTS #{mysql['db_name']} CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\""
  not_if "mysql -u root -e \"SHOW DATABASES LIKE '#{mysql['db_name']}'\" | grep -q #{mysql['db_name']}"
end

execute "create-user-#{mysql['db_user']}" do
  command "mysql -u root -e \"CREATE USER IF NOT EXISTS '#{mysql['db_user']}'@'#{mysql['db_host']}' IDENTIFIED BY '#{mysql['db_password']}'; GRANT ALL PRIVILEGES ON #{mysql['db_name']}.* TO '#{mysql['db_user']}'@'#{mysql['db_host']}'; FLUSH PRIVILEGES;\""
  not_if "mysql -u root -e \"SELECT User FROM mysql.user WHERE User='#{mysql['db_user']}'\" | grep -q #{mysql['db_user']}"
end

# Client config for root (passwordless local access)
template '/root/.my.cnf' do
  source 'templates/my.cnf.erb'
  owner 'root'
  group 'root'
  mode '0600'
  variables(
    root_password: mysql['root_password']
  )
end

# Backup script
template '/usr/local/bin/mysql-backup.sh' do
  source 'templates/mysql-backup.sh.erb'
  owner 'root'
  group 'root'
  mode '0755'
  variables(
    db_name: mysql['db_name'],
    backup_dir: mysql['backup_dir'],
    retention_days: mysql['backup_retention_days']
  )
end

service 'mysql' do
  action [:enable, :start]
end