#!/bin/bash
set -e

# ─── Copie de la config custom (montée hors du volume wazuh_etc) ──────────────
CUSTOM=/wazuh-custom

cp "$CUSTOM/ossec.conf" /var/ossec/etc/ossec.conf

mkdir -p /var/ossec/etc/decoders /var/ossec/etc/rules /var/ossec/etc/lists
cp "$CUSTOM/decoders/"*.xml /var/ossec/etc/decoders/ 2>/dev/null || true
cp "$CUSTOM/rules/"*.xml    /var/ossec/etc/rules/    2>/dev/null || true
cp "$CUSTOM/lists/"*        /var/ossec/etc/lists/    2>/dev/null || true

# ─── Agent config partagée (distribuée aux agents) ───────────────────────────
if [ -f "$CUSTOM/agent.conf" ]; then
    mkdir -p /var/ossec/etc/shared/default
    cp "$CUSTOM/agent.conf" /var/ossec/etc/shared/default/agent.conf
fi

# ─── Active-response scripts ──────────────────────────────────────────────────
if [ -d "$CUSTOM/active-response" ]; then
    for script in "$CUSTOM/active-response/"*.sh; do
        [ -f "$script" ] || continue
        dest="/var/ossec/active-response/bin/$(basename "$script")"
        cp "$script" "$dest"
        chmod 750 "$dest"
        chown root:wazuh "$dest" 2>/dev/null || true
        echo "Active-response déployé: $dest"
    done
fi

# ─── Démarrage Wazuh Manager (entrypoint original) ────────────────────────────
exec /init