#!/usr/bin/env bash
#
# One page showing the health and temperature of every disk in the house
# https://www.zadran.net/guides/disk-health-dashboard-scrutiny
# Generated from the guide, last updated 2026-10-13.
#
# NO WARRANTY. This script is provided as is. You are responsible for
# understanding what it does before running it, and for the consequences.
# Take a backup first. See https://www.zadran.net/disclaimer
#
# Destructive steps are left commented out on purpose -- uncomment them
# only once you have understood what they do.
#
# Where the guide writes a file with <<'EOF' and your values are in it,
# this script uses <<EOF so that they expand. Every other $, ` and \
# gets a backslash, so the rest comes out exactly as the guide shows it.

set -euo pipefail

# ---- Set these for your environment ----
# The IP you give the hub container
HUB_IP='192.168.1.35'
# Any number not already used on that node
CTID='135'
# Usually your router
GATEWAY='192.168.1.1'
# Secret: anyone who knows it reads your alerts
NTFY_TOPIC='myhome-alerts-3f9a1c2b7e4d'
# Affects graph times and log timestamps
TIMEZONE='Europe/Berlin'
# How it is labelled on the dashboard
NAS1_ID='nas-1'
# Where its app config datasets live
NAS1_PATH='/mnt/pool1/apps'

pveam update
TPL=$(pveam available --section system | awk '/debian-13-standard.*_amd64/ {print $2}' | sort -V | tail -1)
pveam download local "$TPL"

TPL=$(ls /var/lib/vz/template/cache/ | grep 'debian-13-standard.*_amd64' | sort -V | tail -1)

pct create ${CTID} local:vztmpl/$TPL \
  --hostname scrutiny \
  --cores 2 --memory 1024 --swap 512 \
  --rootfs local-lvm:10 \
  --net0 name=eth0,bridge=vmbr0,ip=${HUB_IP}/24,gw=${GATEWAY} \
  --nameserver ${GATEWAY} \
  --unprivileged 1 --features nesting=1,keyctl=1 \
  --onboot 1

pct start ${CTID}
pct exec ${CTID} -- bash -c "apt update && apt full-upgrade -y && apt install -y curl ca-certificates && curl -fsSL https://get.docker.com | sh"

pct enter ${CTID}

mkdir -p /opt/scrutiny/config /opt/scrutiny/influxdb
cat > /opt/scrutiny/config/scrutiny.yaml <<EOF
version: 1
web:
  listen:
    port: 8080
    host: 0.0.0.0
  influxdb:
    host: influxdb
    port: 8086
    retention_policy: true
notify:
  urls:
    - "ntfy://ntfy.sh/${NTFY_TOPIC}"
EOF

cat > /opt/scrutiny/compose.yaml <<EOF
services:
  influxdb:
    image: influxdb:2.7
    container_name: scrutiny-influxdb
    restart: unless-stopped
    volumes:
      - ./influxdb:/var/lib/influxdb2
  web:
    image: ghcr.io/analogj/scrutiny:master-web
    container_name: scrutiny-web
    restart: unless-stopped
    ports:
      - "8080:8080"
    volumes:
      - ./config:/opt/scrutiny/config
    environment:
      - TZ=${TIMEZONE}
    depends_on:
      - influxdb
EOF
cd /opt/scrutiny && docker compose up -d

curl -s -X POST http://localhost:8080/api/health/notify

mkdir -p ${NAS1_PATH}/scrutiny-collector/config
cat > ${NAS1_PATH}/scrutiny-collector/config/collector.yaml <<EOF
version: 1
host:
  id: "${NAS1_ID}"
api:
  endpoint: "http://${HUB_IP}:8080"
log:
  file: "/opt/scrutiny/config/collector.log"
  level: INFO
EOF

docker exec $(docker ps -q --filter name=scrutiny-collector) scrutiny-collector-metrics run