#!/usr/bin/env bash
set -euo pipefail

if [[ "${I_UNDERSTAND_THIS_RELOADS_SERVICES:-}" != "YES" ]]; then
  cat >&2 <<'MSG'
Refusing to run without explicit confirmation.

Re-run with:
  I_UNDERSTAND_THIS_RELOADS_SERVICES=YES ./rollback-mission-control-fix.sh /path/to/vhost.conf.bak.TIMESTAMP
MSG
  exit 1
fi

if [[ $# -ne 1 ]]; then
  echo "Usage: $0 /path/to/vhost.conf.bak.TIMESTAMP" >&2
  exit 1
fi

BACKUP=$1
VHOST=/usr/local/lsws/conf/vhosts/altaira.panomity.com/vhost.conf

if [[ ! -f "$BACKUP" ]]; then
  echo "Backup not found: $BACKUP" >&2
  exit 1
fi

echo "Restoring LiteSpeed vhost from $BACKUP"
cp "$BACKUP" "$VHOST"

echo "Reloading LiteSpeed"
/usr/local/lsws/bin/lswsctrl reload

echo
echo "Rollback complete. Re-check expected protected behavior with:"
echo "  curl -I https://altaira.panomity.com/mc/healthz"
echo "  curl -I https://altaira.panomity.com/mc/api/v1/agent/boards"