#!/bin/bash
# Deploy quiXzoom SSO Auth Service

set -e

echo "🚀 Deploying quiXzoom SSO Auth Service..."

# Build and start services
docker-compose down
docker-compose build
docker-compose up -d

# Wait for health check
echo "⏳ Waiting for service to start..."
sleep 5

# Check health
if curl -sf http://localhost:8080/health > /dev/null; then
    echo "✅ SSO Auth Service is running"
else
    echo "❌ Health check failed"
    exit 1
fi

# Generate keys if needed
if [ ! -f "keys/private.pem" ]; then
    echo "🔑 Generating JWT keys..."
    mkdir -p keys
    openssl genrsa -out keys/private.pem 2048
    openssl rsa -in keys/private.pem -pubout -out keys/public.pem
    echo "✅ Keys generated"
fi

echo ""
echo "📋 SSO Service deployed!"
echo "   URL: https://auth.quixzoom.com"
echo "   Health: http://localhost:8080/health"
echo ""
echo "Next steps:"
echo "1. Configure DNS: auth.quixzoom.com → this server"
echo "2. Set up SSL certificates"
echo "3. Update all quixzoom sites to include auth-check.js"