"""Initial schema

Revision ID: 0001_initial
Revises:
Create Date: 2026-07-25
"""

from typing import Sequence, Union

import sqlalchemy as sa
from alembic import op

revision: str = "0001_initial"
down_revision: Union[str, None] = None
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def upgrade() -> None:
    op.create_table(
        "admin_users",
        sa.Column("id", sa.Integer(), primary_key=True),
        sa.Column("username", sa.String(length=64), nullable=False),
        sa.Column("email", sa.String(length=255), nullable=False),
        sa.Column("password_hash", sa.String(length=255), nullable=False),
        sa.Column("role", sa.String(length=32), nullable=False, server_default="admin"),
        sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.text("true")),
        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
    )
    op.create_index("ix_admin_users_username", "admin_users", ["username"], unique=True)
    op.create_unique_constraint("uq_admin_users_email", "admin_users", ["email"])

    op.create_table(
        "vpn_servers",
        sa.Column("id", sa.Integer(), primary_key=True),
        sa.Column("name", sa.String(length=120), nullable=False),
        sa.Column("protocol", sa.String(length=32), nullable=False),
        sa.Column("public_host", sa.String(length=255), nullable=False),
        sa.Column("public_port", sa.Integer(), nullable=False),
        sa.Column("interface_name", sa.String(length=32), nullable=False),
        sa.Column("subnet", sa.String(length=64), nullable=False),
        sa.Column("dns", sa.String(length=255), nullable=False, server_default="1.1.1.1"),
        sa.Column("server_private_key", sa.Text(), nullable=False),
        sa.Column("server_public_key", sa.Text(), nullable=False),
        sa.Column("jc", sa.Integer(), nullable=True),
        sa.Column("jmin", sa.Integer(), nullable=True),
        sa.Column("jmax", sa.Integer(), nullable=True),
        sa.Column("s1", sa.Integer(), nullable=True),
        sa.Column("s2", sa.Integer(), nullable=True),
        sa.Column("h1", sa.Integer(), nullable=True),
        sa.Column("h2", sa.Integer(), nullable=True),
        sa.Column("h3", sa.Integer(), nullable=True),
        sa.Column("h4", sa.Integer(), nullable=True),
        sa.Column("is_enabled", sa.Boolean(), nullable=False, server_default=sa.text("true")),
        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
    )
    op.create_index("ix_vpn_servers_protocol", "vpn_servers", ["protocol"])

    op.create_table(
        "vpn_clients",
        sa.Column("id", sa.Integer(), primary_key=True),
        sa.Column("server_id", sa.Integer(), sa.ForeignKey("vpn_servers.id", ondelete="CASCADE"), nullable=False),
        sa.Column("name", sa.String(length=120), nullable=False),
        sa.Column("private_key", sa.Text(), nullable=False),
        sa.Column("public_key", sa.Text(), nullable=False),
        sa.Column("preshared_key", sa.Text(), nullable=False),
        sa.Column("address", sa.String(length=64), nullable=False),
        sa.Column("allowed_ips", sa.String(length=255), nullable=False, server_default="0.0.0.0/0, ::/0"),
        sa.Column("is_enabled", sa.Boolean(), nullable=False, server_default=sa.text("true")),
        sa.Column("notes", sa.Text(), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
        sa.UniqueConstraint("server_id", "name", name="uq_client_name_per_server"),
    )
    op.create_index("ix_vpn_clients_server_id", "vpn_clients", ["server_id"])


def downgrade() -> None:
    op.drop_table("vpn_clients")
    op.drop_table("vpn_servers")
    op.drop_table("admin_users")