#!/bin/sh
# Downloads the official Traefik release for one platform and checks its checksum.
#
#   deploy/fetch-traefik.sh <os> <arch> <destination-dir>
#
# Blacktip ships this exact Traefik version, which is the one it was tested with.
# Set TRAEFIK_VERSION to try another.
set -eu
OS=${1:?os} ARCH=${2:?arch} DEST=${3:?destination}
VERSION=${TRAEFIK_VERSION:-3.7.16}
case "$ARCH" in arm) ARCH=armv7 ;; esac
EXT=tar.gz
[ "$OS" = windows ] && EXT=zip
BASE="https://github.com/traefik/traefik/releases/download/v$VERSION"
FILE="traefik_v${VERSION}_${OS}_${ARCH}.$EXT"
CACHE=${TRAEFIK_CACHE:-${TMPDIR:-/tmp}/traefik-cache}
mkdir -p "$CACHE" "$DEST"
[ -f "$CACHE/$FILE" ] || curl -fsSL -o "$CACHE/$FILE" "$BASE/$FILE"
[ -f "$CACHE/checksums-$VERSION.txt" ] || curl -fsSL -o "$CACHE/checksums-$VERSION.txt" "$BASE/traefik_v${VERSION}_checksums.txt"
want=$(grep " $FILE\$" "$CACHE/checksums-$VERSION.txt" | cut -d' ' -f1)
[ -n "$want" ] || { echo "no checksum listed for $FILE" >&2; exit 1; }
got=$(sha256sum "$CACHE/$FILE" | cut -d' ' -f1)
[ "$want" = "$got" ] || { echo "checksum mismatch for $FILE" >&2; rm -f "$CACHE/$FILE"; exit 1; }
if [ "$EXT" = zip ]; then
	unzip -qo "$CACHE/$FILE" traefik.exe -d "$DEST"
else
	tar -xzf "$CACHE/$FILE" -C "$DEST" traefik
fi
echo "traefik $VERSION for $OS/$ARCH ready"