# Script for frequent container update
# 
# inspired by: https://forum.mikrotik.com/viewtopic.php?t=203375#p1048454
# changed:
# - seperated scripts into several PARAM per Container and one central CORE-logic 
# - added paramter for RegistryURL - as container may come from different source, not only docker (e.g. github)
# - added root-Dir
# - added check for "container exists?" > with this check it works even without an existing one > usefull as initial install-Script as well now  
# - added LOG
# ###########################

# global variables set in container-specific scripts

:global containerConfigRegistryURL
:global containerToUpdate
:global containerNetwatch
:global containerRootDir
:global containerVeth
:global containerImage
:global containerEnvlist
:global containerMounts
:global containerLogging
:global containerStartOnBoot
:global containerCmd

# ######

/ log info "[UPDATE SCRIPT] $containerToUpdate INTO $containerRootDir FROM $containerConfigRegistryURL | $containerImage MOUNT $containerMounts ENV $containerEnvlist VETH $containerVeth LOG $containerLogging STARTonBOOT $containerStartOnBoot | CMD: $containerCmd"  

/container/set [find where comment~$containerToUpdate] logging=yes

# set RegistryURL
/container/config/set registry-url=$containerConfigRegistryURL tmpdir=usb1/pull

# if Container exists: STOP + REMOVE | if not: Skip and go on with PULL container + START
:if ([/container/print count-only where comment~$containerToUpdate] > 0) do={

  # DISABLE NETWATCH
  /tool/netwatch/disable [find name~$containerNetwatch]

  # Stop Container 
  /container/stop [find where comment~$containerToUpdate]

  # Wait for container(s) to stop 
  :while ( [/container print count-only where comment~$containerToUpdate status=stopping] > 0) do={ :delay 1 }

  # Remove old Container(s)
  /container/remove [find where comment~$containerToUpdate]

  # short delay 
  :delay 3

}

# create new container
/container/add interface=$containerVeth remote-image=$containerImage mounts=$containerMounts envlist=$containerEnvlist start-on-boot=$containerStartOnBoot logging=yes comment=$containerToUpdate root-dir=$containerRootDir cmd=$containerCmd
:delay 1

# Wait for new container to be ready
:while ( [/container print count-only where comment~$containerToUpdate status=extracting] > 0 ) do { :delay 1 }

# Start the new container
/container/start [find where comment~$containerToUpdate]

# short delay 
:delay 5

# set LOGGING
/container/set [find where comment~$containerToUpdate] logging=$containerLogging

# ENABLE NETWATCH
/tool/netwatch/enable [find name~$containerNetwatch]

:global containerConfigRegistryURL
:set $containerConfigRegistryURL "https://registry-1.docker.io"  

:global containerToUpdate
:set $containerToUpdate "pihole"  

# For pihole we need "check pihole running" constanly! Hence, "web" should be disabled only 
:global containerNetwatch
:set $containerNetwatch "pihole Web"  

:global containerRootDir
set $containerRootDir "usb1/containers/pihole"  

:global containerVeth
:set $containerVeth "VETH_pihole"  

:global containerImage
:set $containerImage "pihole/pihole:latest"  

:global containerEnvlist
:set $containerEnvlist "pihole_envs"  

:global containerMounts
:set $containerMounts "pihole_dnsmasq,pihole_etc"  

:global containerLogging
:set $containerLogging "yes"  

:global containerStartOnBoot
:set $containerStartOnBoot "yes"  

:global containerCmd
:set $containerCmd ""  

# #######

/system script run Container_Update_CORE

:global containerConfigRegistryURL
:set $containerConfigRegistryURL "https://registry-1.docker.io"  

:global containerToUpdate
:set $containerToUpdate "MQTT"  

:global containerNetwatch
:set $containerNetwatch "MQTT"  

:global containerRootDir
set $containerRootDir "usb1/containers/MQTT_mosquitto"  

:global containerVeth
:set $containerVeth "VETH_MQTT_mosquitto"  

:global containerImage
:set $containerImage "library/eclipse-mosquitto:latest"  

:global containerEnvlist
:set $containerEnvlist ""  

:global containerMounts
:set $containerMounts "MQTT_mosquitto_config,SSL"  

:global containerLogging
:set $containerLogging "no"  

:global containerStartOnBoot
:set $containerStartOnBoot "yes"  

:global containerCmd
:set $containerCmd ""  

# #######

/system script run Container_Update_CORE

/ip dns set servers=172.19.21.2,9.9.9.9

# Set DNS-Server for all clients via DHCP-Servers (comma-seperated)
/ip dhcp-server network set [find gateway=192.168.10.1] dns-server=172.19.21.2
/ip dhcp-server network set [find gateway=192.168.20.1] dns-server=172.19.21.2
/ip dhcp-server network set [find gateway=192.168.30.1] dns-server=172.19.21.2
/ip dhcp-server network set [find gateway=192.168.80.1] dns-server=172.19.21.2
/ip dhcp-server network set [find gateway=192.168.100.1] dns-server=172.19.21.2

# remove all dynamic leases to force all clients to fetch new DNS-Setting
/ip dhcp-server lease remove [find dynamic server=dhcp-010-int]
/ip dhcp-server lease remove [find dynamic server=dhcp-020-haus]
/ip dhcp-server lease remove [find dynamic server=dhcp-030-media]
/ip dhcp-server lease remove [find dynamic server=dhcp-080-iot]
/ip dhcp-server lease remove [find dynamic server=dhcp-100-gast]

/ip dns set servers=9.9.9.9

# Set DNS-Server for all clients via DHCP-Servers
/ip dhcp-server network set [find gateway=192.168.10.1] dns-server=192.168.10.1
/ip dhcp-server network set [find gateway=192.168.20.1] dns-server=192.168.20.1
/ip dhcp-server network set [find gateway=192.168.30.1] dns-server=192.168.30.1
/ip dhcp-server network set [find gateway=192.168.80.1] dns-server=192.168.80.1
/ip dhcp-server network set [find gateway=192.168.100.1] dns-server=192.168.100.1

# remove all dynamic leases to force all clients to fetch new DNS-Setting
/ip dhcp-server lease remove [find dynamic server=dhcp-010-int]
/ip dhcp-server lease remove [find dynamic server=dhcp-020-haus]
/ip dhcp-server lease remove [find dynamic server=dhcp-030-media]
/ip dhcp-server lease remove [find dynamic server=dhcp-080-iot]
/ip dhcp-server lease remove [find dynamic server=dhcp-100-gast]

/tool/e-mail/send to=mikrotik@<deineDomain> subject="Container pi-hole SERVICE down" body="Solution: Container to be stopped and re-started via RESTART-Script"  

*** [ DIAGNOSING ]: Dashboard headers
[   ] Web interface X-Header: X-Pi-hole: The Pi-hole Web interface is working!

add action=dst-nat chain=dstnat dst-address=<IP des MT> dst-port=9000 protocol=tcp to-addresses=172.19.21.2 to-ports=80

add action=masquerade chain=srcnat src-address=172.17.0.0/24

add action=accept chain=forward dst-address=172.17.0.0/24 dst-port=80,9000 protocol=tcp src-address=<IP des MT.0>/24