#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ROOT_DIR="$(cd "$SCRIPT_DIR/../.." && pwd)"
# shellcheck source=../common.sh
. "$SCRIPT_DIR/../common.sh"

require_cmd install systemctl

log "[30] Install WireGuard NM profile (autoconnect=false)"
if [ -f "$ROOT_DIR/configs/wireguard/wg0.nmconnection" ]; then
  sudo install -D -m 600 -o root -g root "$ROOT_DIR/configs/wireguard/wg0.nmconnection" /etc/NetworkManager/system-connections/wg0.nmconnection
else
  warn "Missing WireGuard NM profile (skip): $ROOT_DIR/configs/wireguard/wg0.nmconnection"
fi

log "[30] Install wg-quick override to avoid early DNS race"
sudo mkdir -p /etc/systemd/system/wg-quick@wg0.service.d
if [ -f "$ROOT_DIR/configs/wireguard/wg-quick-override.conf" ]; then
  sudo install -m 644 "$ROOT_DIR/configs/wireguard/wg-quick-override.conf" /etc/systemd/system/wg-quick@wg0.service.d/override.conf
  sudo systemctl daemon-reload
else
  warn "Missing wg-quick override (skip)"
fi