#!/usr/bin/env bash
# disk-clean.sh
# Automatic safe cleanup script for Rocky Linux 9
# This script ALWAYS runs non-interactively (batch)
# Usage: sudo ./disk-clean.sh
set -euo pipefail

VACUUM_SIZE="200M"          # journalctl vacuum target
LARGE_LOG_SIZE="+100M"      # threshold for truncation (find syntax)
TMP_AGE_DAYS=3              # remove files older than this from /tmp and /var/tmp
CACHE_AGE_DAYS=30           # remove caches older than this from /var/cache
KEEP_KERNELS=2              # keep this many latest kernels
REMOVE_OPT=0                # ALWAYS allow removing /opt entries (user requested)

timestamp() { date +"%F %T"; }
log() {
  echo "$(timestamp) $*"
}

# must be root
if [ "$EUID" -ne 0 ]; then
  echo "This script must be run as root. Exiting."
  exit 1
fi

log "=== Starting Rocky Linux 9 automated cleanup (batch mode) ==="
log "Command line: $0 $*"
log "REMOVE_OPT=$REMOVE_OPT"
log "VACUUM_SIZE=$VACUUM_SIZE, LARGE_LOG_SIZE=$LARGE_LOG_SIZE, TMP_AGE_DAYS=$TMP_AGE_DAYS, CACHE_AGE_DAYS=$CACHE_AGE_DAYS"

# Report current disk usage
log "Disk usage before cleanup:"
df -h
log "Top-level disk usage ( / ):"
du -xh --max-depth=1 / | sort -rh | head -n 20

# 1) DNF cleanup
log "Cleaning DNF caches and removing orphaned packages..."
dnf -y clean all
dnf -y autoremove

# 2) Journal logs vacuum
log "Vacuuming systemd journal to keep ${VACUUM_SIZE}..."
journalctl --vacuum-size="$VACUUM_SIZE"

# 3) Truncate very large logs in /var/log (safer than delete)
log "Truncating logs in /var/log larger than ${LARGE_LOG_SIZE} (keeps zero-sized file so services don't break)..."
find /var/log -type f -size "$LARGE_LOG_SIZE" -print0 2>/dev/null | while IFS= read -r -d '' f; do
  echo "Truncating $f"
  : > "$f" || echo "Failed to truncate $f"
done

# 4) Clean /tmp and /var/tmp older than TMP_AGE_DAYS
log "Removing files older than ${TMP_AGE_DAYS} days from /tmp and /var/tmp..."
find /tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --
find /var/tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --

# 5) Clean /var/cache older than CACHE_AGE_DAYS (but not all cache immediately)
log "Removing entries in /var/cache older than ${CACHE_AGE_DAYS} days..."
find /var/cache -mindepth 1 -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --

# 6) Clean user caches (~/.cache) and Downloads older than CACHE_AGE_DAYS
log "Cleaning user caches and old downloads (home dirs)..."
for homedir in /home/* /root; do
  [ -d "$homedir" ] || continue
  usercache="$homedir/.cache"
  userdownloads="$homedir/Downloads"
  usertrash="$homedir/.local/share/Trash"

  if [ -d "$usercache" ]; then
    log "Removing contents of $usercache"
    rm -rf "${usercache:?}/"* 2>/dev/null
  fi
  if [ -d "$userdownloads" ]; then
    log "Removing files older than ${CACHE_AGE_DAYS} days from $userdownloads"
    find "$userdownloads" -type f -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -f -- 2>/dev/null
  fi
  if [ -d "$usertrash" ]; then
    log "Emptying trash in $usertrash"
    rm -rf "${usertrash:?}/"* 2>/dev/null
  fi
done

# 7) Docker / Podman cleanup (if present)
if command -v docker >/dev/null 2>&1; then
  log "Docker detected: pruning images/containers/volumes (aggressive)..."
  docker system df
  docker system prune -a --volumes -f
fi

if command -v podman >/dev/null 2>&1; then
  log "Podman detected: pruning images/containers (aggressive)..."
  podman system df
  podman system prune -a -f
fi

# 8) Flatpak unused runtimes/apps (if present)
if command -v flatpak >/dev/null 2>&1; then
  log "Flatpak detected: trying to uninstall unused runtimes/apps..."
  flatpak uninstall --unused -y || flatpak uninstall --unused
  flatpak repair
fi

# 9) Python Pip cleanup
if command -v pip3 >/dev/null 2>&1 || command -v pip >/dev/null 2>&1; then
  log "Python Pip detected: cleaning cache..."
  if command -v pip3 >/dev/null 2>&1; then
    pip3 cache purge
  elif command -v pip >/dev/null 2>&1; then
    pip cache purge
  fi
fi

# 10) Conda cleanup
if command -v conda >/dev/null 2>&1; then
  log "Conda detected: cleaning all..."
  conda clean --all -y
fi

# 11) Remove old kernels but keep the last KEEP_KERNELS (safe)
log "Removing old kernels, keeping the last $KEEP_KERNELS kernels..."
OLD_KERNELS=$(dnf repoquery --installonly --latest-limit=-$KEEP_KERNELS -q 2>/dev/null)
if [ -n "$OLD_KERNELS" ]; then
  log "Old kernels to remove: $OLD_KERNELS"
  dnf -y remove $OLD_KERNELS
else
  log "No old kernels found by DNF repoquery. Only $KEEP_KERNELS or fewer are currently installed."
fi

# 12) /opt review and removal (ON by default now)
if [ -d /opt ]; then
  log "/opt usage (top entries):"
  du -sh /opt/* 2>/dev/null | sort -h | head -n 20

  if [ "$REMOVE_OPT" = "1" ]; then
    OPT_TARGETS=(/opt/local-path-provisioner)
    for t in "${OPT_TARGETS[@]}"; do
      if [ -d "$t" ]; then
        log "Removing $t as REMOVE_OPT=1"
        rm -rf "$t"
      fi
    done
  else
    log "Automatic /opt removals disabled (set REMOVE_OPT=1 to enable)."
  fi
fi

# 13) Find large files > 100MB (report only)
log "Listing files larger than 100MB (report only):"
find / -xdev -type f -size +100M -printf '%s\t%p\n' 2>/dev/null | sort -nr | head -n 50 | awk '{printf "%.1fMB\t%s\n",$1/1024/1024,$2}'

# Final disk usage
log "Disk usage after cleanup:"
df -h

log "=== Cleanup finished ==="
exit 0