#!/bin/bash
set -uo pipefail

LOG="/tmp/auto_update_$(date +%Y%m%d_%H%M).log"

log() {
    echo "$1" | tee -a "$LOG"
}

log "[+] Starting auto update process..."

### 1. ONLYOFFICE GPG Key
ONLYOFFICE_KEY="/usr/share/keyrings/onlyoffice.gpg"

if [ ! -f "$ONLYOFFICE_KEY" ]; then
    log "[!] ONLYOFFICE GPG key not found. Adding key..."
    if curl -fsSL https://download.onlyoffice.com/GPG-KEY-ONLYOFFICE \
        | sudo gpg --dearmor -o "$ONLYOFFICE_KEY"; then
        log "[✓] ONLYOFFICE GPG key added."
    else
        log "[!] Failed to add ONLYOFFICE GPG key."
    fi
else
    log "[✓] ONLYOFFICE GPG key already exists."
fi

### 2. Update
log "[+] Updating package lists..."
sudo apt-get update >> "$LOG" 2>&1 || log "[WARN] apt update failed"

### 3. Upgrade
log "[+] Upgrading packages..."
sudo apt-get -y full-upgrade >> "$LOG" 2>&1 || log "[WARN] upgrade failed"

### 4. Cleanup (안전 버전)
log "[+] Removing unused packages..."
sudo apt-get -y autoremove >> "$LOG" 2>&1 || log "[WARN] autoremove failed"

### ❌ 위험해서 제거 (설명용 주석)
# sudo apt-get purge $(dpkg -l | awk '/^rc/ {print $2}')

### 5. Cache cleanup
log "[+] Cleaning package cache..."
sudo apt-get clean >> "$LOG" 2>&1

### 6. rkhunter
if command -v rkhunter >/dev/null 2>&1; then
    log "[+] Updating rkhunter file properties..."
    sudo rkhunter --propupd >> "$LOG" 2>&1 || log "[WARN] rkhunter update failed"
fi

log "[✓] Auto update completed successfully."
log "[INFO] Log file: $LOG"