#!/bin/bash
echo "=== CREATING VAULT STRUCTURE ==="
mkdir -p /opt/wevads/vault /opt/wevads/hamid-files
chown -R www-data:www-data /opt/wevads

# GOLD backups from current state
cp /var/www/html/weval-translate.js /opt/wevads/vault/weval-translate.js.GOLD-20260315
cp /var/www/html/api/nonreg-opus.php /opt/wevads/vault/nonreg-opus.php.GOLD-20260315
cp /var/www/html/api/ultimate-quality.php /opt/wevads/vault/ultimate-quality.php.GOLD-20260315
cp /var/www/html/index.html /opt/wevads/vault/index.html.GOLD-20260315
cp /var/www/html/products/workspace.html /opt/wevads/vault/workspace.html.GOLD-20260315
tar czf /opt/wevads/vault/wevia-api-GOLD-20260315.tar.gz -C /var/www/weval wevia-ia/weval-chatbot-api.php wevia-ia/cognitive-brain.php
tar czf /opt/wevads/vault/wevia-brain-GOLD-20260315.tar.gz -C /opt wevia-brain/

# Sentinel PHP whitelist fix on S95
echo ""
echo "=== FIX SENTINEL PHP WHITELIST ON S95 ==="
ssh -o StrictHostKeyChecking=no -p 49222 root@10.1.0.3 "
grep -q '10.1.0.2' /opt/wevads-arsenal/public/sentinel-brain.php && echo 'ALREADY_WHITELISTED' || {
  # Find the IP whitelist array and add 10.1.0.2
  sed -i \"s/'127.0.0.1'/'127.0.0.1','10.1.0.2'/\" /opt/wevads-arsenal/public/sentinel-brain.php 2>/dev/null
  grep -q '10.1.0.2' /opt/wevads-arsenal/public/sentinel-brain.php && echo 'SENTINEL_PHP_WHITELIST_FIXED' || echo 'MANUAL_FIX_NEEDED'
}
" 2>&1

echo ""
echo "=== VERIFY ==="
ls -la /opt/wevads/vault/
echo ""
echo "=== DONE ==="