#!/usr/bin/env bash
# ==============================================================================
# TheCr3w-dev — Dodanie Keycloak OIDC do Forgejo przez CLI
# ==============================================================================

set -eo pipefail

SECRET="$1"

if [ -z "$SECRET" ]; then
    echo "Użycie: ./scripts/setup_forgejo_keycloak.sh <KEYCLOAK_CLIENT_SECRET>"
    echo "Pobierz Client Secret z Keycloak: Clients -> forgejo -> Credentials -> Client Secret"
    exit 1
fi

echo "Dodawanie Keycloak OIDC do Forgejo..."

docker exec -u 1000 forgejo forgejo admin auth add-oauth \
  --name Keycloak \
  --provider openidConnect \
  --key forgejo \
  --secret "$SECRET" \
  --auto-discovery-url https://login.thecr3wnet.com/realms/master/.well-known/openid-configuration

echo "✓ Źródło uwierzytelniania Keycloak zostało pomyślnie dodane do Forgejo!"
echo "Możesz teraz logować się na https://git.thecr3wnet.com za pomocą Keycloak."