#!/bin/bash
# Move credentials file to the more secure location outside wordpress directory

SOURCE_FILE="/var/www/html/wordpress6/wordpress/secure/google-drive-credentials.json"
TARGET_DIR="/var/www/html/wordpress6/secure"
TARGET_FILE="$TARGET_DIR/google-drive-credentials.json"

echo "Moving credentials file to secure location..."

# Create target directory if it doesn't exist
if [ ! -d "$TARGET_DIR" ]; then
    echo "Creating secure directory..."
    sudo mkdir -p "$TARGET_DIR"
fi

# Move the file
if [ -f "$SOURCE_FILE" ]; then
    echo "Moving file from $SOURCE_FILE to $TARGET_FILE..."
    sudo mv "$SOURCE_FILE" "$TARGET_FILE"
    echo "✓ File moved"
else
    echo "⚠ Source file not found at $SOURCE_FILE"
    echo "Checking for alternative filename..."
    ALTERNATIVE=$(ls /var/www/html/wordpress6/wordpress/secure/*.json 2>/dev/null | head -1)
    if [ -n "$ALTERNATIVE" ]; then
        echo "Found: $ALTERNATIVE"
        sudo mv "$ALTERNATIVE" "$TARGET_FILE"
        echo "✓ File moved and renamed"
    else
        echo "No JSON file found in source directory"
        exit 1
    fi
fi

# Set correct permissions
echo "Setting permissions..."
sudo chown www-data:www-data "$TARGET_FILE"
sudo chmod 600 "$TARGET_FILE"
sudo chown www-data:www-data "$TARGET_DIR"
sudo chmod 750 "$TARGET_DIR"

echo ""
echo "Verification:"
echo "Directory:"
ls -ld "$TARGET_DIR"
echo ""
echo "File:"
ls -la "$TARGET_FILE"

echo ""
echo "✓ Credentials file moved to secure location: $TARGET_FILE"