menu.sh

#!/bin/bash

set -euo pipefail
trap 'echo -e "\033[1;31m❌ Error occurred at line $LINENO. Exiting.\033[0m"' ERR

RED="\033[1;31m"
GREEN="\033[1;32m"
YELLOW="\033[1;33m"
BLUE="\033[1;34m"
CYAN="\033[1;36m"
WHITE="\033[1;37m"
NC="\033[0m"     # Reset / No Color
BOLD="\033[1m"

BASE_DIR="$HOME/sepolia-node"
JWT_PATH="$BASE_DIR/jwt.hex"

# Fetch IP safely
IP_ADDR="$(curl -s ifconfig.me || true)"
if [ -z "$IP_ADDR" ]; then
  IP_ADDR="$(hostname -I | awk '{print $1}')"
fi

print_banner() {
    clear
    echo "┌───────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐"
    echo "│  ██╗░░██╗██╗░░░██╗░██████╗████████╗██╗░░░░░███████╗  ░█████╗░██╗██████╗░██████╗░██████╗░░█████╗░██████╗░░██████╗  │"
    echo "│  ██║░░██║██║░░░██║██╔════╝╚══██╔══╝██║░░░░░██╔════╝  ██╔══██╗██║██╔══██╗██╔══██╗██╔══██╗██╔══██╗██╔══██╗██╔════╝  │"
    echo "│  ███████║██║░░░██║╚█████╗░░░░██║░░░██║░░░░░█████╗░░  ███████║██║██████╔╝██║░░██║██████╔╝██║░░██║██████╔╝╚█████╗░  │"
    echo "│  ██╔══██║██║░░░██║░╚═══██╗░░░██║░░░██║░░░░░██╔══╝░░  ██╔══██║██║██╔══██╗██║░░██║██╔══██╗██║░░██║██╔═══╝░░╚═══██╗  │"
    echo "│  ██║░░██║╚██████╔╝██████╔╝░░░██║░░░███████╗███████╗  ██║░░██║██║██║░░██║██████╔╝██║░░██║╚█████╔╝██║░░░░░██████╔╝  │"
    echo "│  ╚═╝░░╚═╝░╚═════╝░╚═════╝░░░░╚═╝░░░╚══════╝╚══════╝  ╚═╝░░╚═╝╚═╝╚═╝░░╚═╝╚═════╝░╚═╝░░╚═╝░╚════╝░╚═╝░░░░░╚═════╝░  │"
    echo "└───────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘"
    echo -e "${YELLOW}                  🚀 Aztec Node Manager by Aashish 🚀${NC}"
    echo -e "${YELLOW}              GitHub: https://github.com/HustleAirdrops${NC}"
    echo -e "${YELLOW}              Telegram: https://t.me/Hustle_Airdrops${NC}"
    echo -e "${GREEN}===============================================================================${NC}"
    
    echo -e "  📡 Ethereum Sepolia Full Node Setup Menu"
    echo -e "  🔗 Geth (Execution) + Prysm (Beacon Chain)"
    echo -e "==============================================${NC}"
    echo "1) 🚀 Install & Start Rpc Sync"
    echo "2) 📜 View Logs"
    echo "3) 📶 Check Node Status"
    echo "4) 🔗 Get RPC URLs"
    echo "5) 🔐 Rpc Access Controller"
    echo "6) ❌ Exit"
    echo -e "==============================================${NC}"
    echo -en "${NC}Choose an option [1-5]: "
}

install_dependencies() {
  echo -e "${YELLOW}🔧 Installing required packages...${NC}"
  sudo apt update -y && sudo apt upgrade -y

  # Fix common lock issues
  sudo rm -f /var/lib/apt/lists/lock /var/cache/apt/archives/lock /var/lib/dpkg/lock-frontend
  sudo dpkg --configure -a

  local packages=(
    curl jq net-tools iptables build-essential git wget lz4 make gcc nano
    automake autoconf tmux htop nvme-cli libgbm1 pkg-config libssl-dev
    libleveldb-dev tar clang bsdmainutils ncdu unzip ufw openssl
  )

  for pkg in "${packages[@]}"; do
    if ! dpkg -s "$pkg" >/dev/null 2>&1; then
      echo -e "${BLUE}🔄 Installing $pkg...${NC}"
      sudo apt-get install -y "$pkg"
      echo -e "${GREEN}✅ $pkg installed${NC}"
    else
      echo -e "${CYAN}✔️ $pkg already present${NC}"
    fi
  done
}

install_docker() {
  if ! command -v docker &>/dev/null; then
    echo -e "${CYAN}🐳 Installing Docker...${NC}"
    sudo apt-get remove -y docker docker-engine docker.io containerd runc || true
    sudo apt-get install -y ca-certificates gnupg

    sudo install -m 0755 -d /etc/apt/keyrings
    curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
    sudo chmod a+r /etc/apt/keyrings/docker.gpg

    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
      | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

    sudo apt-get update -y
    sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

    sudo systemctl enable docker
    sudo systemctl restart docker

    echo -e "${GREEN}✅ Docker installed successfully${NC}"
  else
    echo -e "${CYAN}ℹ️ Docker already installed. Skipping.${NC}"
  fi
}

check_ports() {
  echo -e "${YELLOW}🕵️ Checking required ports...${NC}"
  local conflicts
  conflicts=$(sudo netstat -tuln | grep -E '30303|8545|8546|8551|4000|3500' || true)

  if [ -n "$conflicts" ]; then
    echo -e "${RED}❌ Ports already in use:\n$conflicts${NC}"
    exit 1
  else
    echo -e "${GREEN}✅ All required ports are available.${NC}"
  fi
}

create_directories() {
  echo -e "${YELLOW}📁 Creating directory structure...${NC}"
  sudo mkdir -p "$BASE_DIR/execution" "$BASE_DIR/consensus"
  sudo rm -f "$JWT_PATH"
  sudo openssl rand -hex 32 | sudo tee "$JWT_PATH" > /dev/null
  echo -e "${GREEN}✅ JWT created at $JWT_PATH${NC}"
}

write_compose_file() {
  echo -e "${YELLOW}📝 Writing docker-compose.yml...${NC}"
  sudo tee "$BASE_DIR/docker-compose.yml" > /dev/null <<EOF
version: '3.8'

services:
  execution:
    image: ethereum/client-go:stable
    container_name: geth
    network_mode: host
    restart: unless-stopped
    volumes:
      - ./execution:/data
      - ./jwt.hex:/data/jwt.hex
    command:
      - --sepolia
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3
      - --authrpc.addr=0.0.0.0
      - --authrpc.jwtsecret=/data/jwt.hex
      - --authrpc.port=8551
      - --authrpc.vhosts=*
      - --syncmode=snap
      - --datadir=/data

  consensus:
    image: gcr.io/prysmaticlabs/prysm/beacon-chain:stable
    container_name: prysm
    network_mode: host
    restart: unless-stopped
    depends_on:
      - execution
    volumes:
      - ./consensus:/data
      - ./jwt.hex:/data/jwt.hex
    command:
      - --sepolia
      - --accept-terms-of-use
      - --datadir=/data
      - --disable-monitoring
      - --rpc-host=0.0.0.0
      - --rpc-port=4000
      - --grpc-gateway-host=0.0.0.0
      - --grpc-gateway-port=3500
      - --execution-endpoint=http://127.0.0.1:8551
      - --jwt-secret=/data/jwt.hex
      - --checkpoint-sync-url=https://checkpoint-sync.sepolia.ethpandaops.io
      - --genesis-beacon-api-url=https://checkpoint-sync.sepolia.ethpandaops.io
EOF
  echo -e "${GREEN}✅ docker-compose.yml written${NC}"
}

start_services() {
  echo -e "${CYAN}🚀 Starting Ethereum Sepolia services...${NC}"
  cd "$BASE_DIR"
  sudo docker compose up -d
  echo -e "${GREEN}✅ Services started.${NC}"
  echo -e "${GREEN}✅ Node is syncing now... Check Status in 2-3 mins... Estimated Completion time: 4-5 hours${NC}"
}


print_endpoints() {
  echo -e "${CYAN}\n🔗 Ethereum Sepolia RPC Endpoints:${NC}"
  echo -e "${GREEN}📎 Geth:     http://$IP_ADDR:8545${NC}"
  echo -e "${GREEN}📎 Prysm:    http://$IP_ADDR:3500${NC}"
  echo -e "${BLUE}\n🎉 Setup complete — Powered by Aashish💖 ✨${NC}"
}

check_node_status() {
  while true; do
    clear
    echo -e "${CYAN}🔍 Ethereum Sepolia Node Sync Status Checker${NC}"

    echo -e "${YELLOW}📡 Fetching Execution (Geth) Sync Status...${NC}"
    SYNC=$(curl -s -X POST --data '{"jsonrpc":"2.0","method":"eth_syncing","params":[],"id":1}' \
      -H "Content-Type: application/json" http://localhost:8545)

    CURRENT=$(echo "$SYNC" | jq -r '.result.currentBlock // 0' | xargs printf "%d\n")
    HIGHEST=$(echo "$SYNC" | jq -r '.result.highestBlock // 0' | xargs printf "%d\n")
    START=$(echo "$SYNC" | jq -r '.result.startingBlock // 0' | xargs printf "%d\n")

    if [[ "$CURRENT" == "0" || "$HIGHEST" == "0" ]]; then
      echo -e "❌ Node is not syncing or not started properly."
    else
      PROGRESS=$(awk "BEGIN {printf \"%.2f\", ($CURRENT/$HIGHEST)*100}")
      echo -e "🧱 Starting Block : $START"
      echo -e "⏳ Current Block  : $CURRENT"
      echo -e "🚀 Highest Block  : $HIGHEST"
      echo -e "📈 Sync Progress  : ${GREEN}$PROGRESS%${NC}"
    fi

    echo -e "\n${YELLOW}📦 Fetching Current Block Number (via eth_blockNumber)...${NC}"
    BLOCK_HEX=$(curl -s -X POST --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' \
      -H "Content-Type: application/json" http://localhost:8545 | jq -r '.result')

    BLOCK_DEC=$((16#${BLOCK_HEX:2}))
    echo -e "🔢 Block Number   : ${CYAN}$BLOCK_DEC${NC}"

    echo -e "\n${YELLOW}🟣 Beacon Node Status (Prysm)...${NC}"
    curl -s http://localhost:3500/eth/v1/node/syncing | jq

    echo -e "\n⏲️  Auto-refreshing every 10 seconds... (Press Enter to return to menu early)"
    read -t 10 -n 1 key

    if [[ $key == "" ]]; then
      break
    fi
  done

  clear
  echo -e "${GREEN}✅ Sync monitoring stopped.${NC}"
  read -rp "🔙 Press Enter to return to menu..." dummy
}



print_rpc_endpoints() {
  IP_ADDR=$(curl -s ifconfig.me)
  echo -e "${CYAN}\n🔗 Ethereum Sepolia RPC Endpoints:${NC}"
  echo -e "${GREEN}📎 Geth:     http://$IP_ADDR:8545${NC}"
  echo -e "${GREEN}📎 Prysm:    http://$IP_ADDR:3500${NC}"

  echo -e "\n${CYAN}🔍 Checking Ethereum Sepolia Node Sync Status...${NC}"

  # === Geth Sync Check ===
  geth_sync=$(curl -s -X POST -H "Content-Type: application/json" \
    --data '{"jsonrpc":"2.0","method":"eth_syncing","params":[],"id":1}' http://$IP_ADDR:8545)

  is_syncing=$(echo "$geth_sync" | jq -r '.result != false')

  if [[ "$is_syncing" == "true" ]]; then
    current_hex=$(echo "$geth_sync" | jq -r '.result.currentBlock // "0x0"')
    highest_hex=$(echo "$geth_sync" | jq -r '.result.highestBlock // "0x0"')

    current_hex="${current_hex:-0x0}"
    highest_hex="${highest_hex:-0x1}"

    current_dec=$((16#${current_hex:2}))
    highest_dec=$((16#${highest_hex:2}))
    remaining=$(( highest_dec > current_dec ? highest_dec - current_dec : 0 ))
    percent=$(awk "BEGIN { if ($highest_dec > 0) printf \"%.2f\", ($current_dec/$highest_dec)*100; else print \"0.00\" }")

    echo -e "🔄 ${YELLOW}Geth Syncing...${NC}"
    echo -e "   ⏳ Current Block : $current_dec"
    echo -e "   🚀 Highest Block : $highest_dec"
    echo -e "   ⌛ Remaining      : $remaining blocks"
    echo -e "   📊 Progress       : ${GREEN}$percent%${NC}"
    geth_synced=false
  else
    # fully synced
    block_data=$(curl -s -X POST -H "Content-Type: application/json" \
      --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' http://$IP_ADDR:8545)
    current_hex=$(echo "$block_data" | jq -r '.result // "0x0"')
    current_hex="${current_hex:-0x0}"
    current_dec=$((16#${current_hex:2}))
    echo -e "✅ ${GREEN}Geth (Execution Layer): Fully Synced at Block $current_dec!${NC}"
    geth_synced=true
  fi

  # === Prysm Sync Check ===
  prysm_sync=$(curl -s http://$IP_ADDR:3500/eth/v1/node/syncing)

  distance=$(echo "$prysm_sync" | jq -r '.data.sync_distance // "0"' 2>/dev/null)
  head_slot=$(echo "$prysm_sync" | jq -r '.data.head_slot // "0"' 2>/dev/null)

  distance="${distance:-0}"
  head_slot="${head_slot:-0}"

  if [[ "$distance" == "0" ]]; then
    echo -e "✅ ${GREEN}Prysm (Consensus Layer): Fully Synced${NC}"
    prysm_synced=true
  else
    echo -e "🔄 ${YELLOW}Prysm Syncing...${NC}"
    echo -e "   🌀 Sync Distance : $distance slots"
    echo -e "   🧠 Head Slot     : $head_slot"
    prysm_synced=false
  fi

  # === Final Combined Status ===
  if [[ "$geth_synced" == true && "$prysm_synced" == true ]]; then
    echo -e "\n${BLUE}🎉 Node is Fully Synced & Operational! — Powered by Aashish 💖 ✨${NC}"
  else
    echo -e "\n${RED}⚠️  Node is still syncing... please wait until both layers are ready.${NC}"
  fi
}


access_controller() {
  trap 'echo -e "\n${RED}👋 Exiting Access Controller...${NC}"; return' SIGINT

  while true; do
    clear
    echo -e "\n${CYAN}${BOLD}=============================================="
    echo -e "      🔐 ETHEREUM RPC ACCESS CONTROLLER       "
    echo -e "==============================================${NC}"
    echo -e "${WHITE}${BOLD}📋 Main Menu — Select Action:${NC}"
    echo "1) Grant access"
    echo "2) Revoke access"
    echo "3) Show current access list"
    echo "4) Show RPC links"
    echo "5) Back"
    echo -n -e "${CYAN}Choose option: ${NC}"
    read mainopt

    case $mainopt in
      1|2)
        ACTION=$([[ $mainopt == 1 ]] && echo "grant" || echo "revoke")
        echo -ne "${CYAN}🌐 Enter IP to $ACTION access (or type 'all'): ${NC}"
        read IP
        [[ "$IP" == "all" ]] && IP="0.0.0.0/0" && echo -e "${YELLOW}⚠️  Allowing ALL access — use with caution!${NC}"

        while true; do
          echo -e "\n${YELLOW}${BOLD}➡️  Which RPC do you want to $ACTION access for?${NC}"
          echo "1) Sepolia (8545)"
          echo "2) Beacon  (3500)"
          echo "3) Both"
          echo "4) Back"
          echo -n -e "${CYAN}Choose option: ${NC}"
          read rpcopt

          case $rpcopt in
            1) ports=(8545) ;;
            2) ports=(3500) ;;
            3) ports=(8545 3500) ;;
            4) break ;;
            *) echo -e "${RED}❌ Invalid choice. Try again.${NC}"; continue ;;
          esac

          for PORT in "${ports[@]}"; do
            if [[ "$ACTION" == "grant" ]]; then
              sudo iptables -I INPUT -p tcp --dport "$PORT" -s "$IP" -j ACCEPT 2>/dev/null
              echo -e "${GREEN}✅ Granted access to $IP on port $PORT${NC}"
            else
              sudo iptables -D INPUT -p tcp --dport "$PORT" -s "$IP" -j ACCEPT 2>/dev/null
              echo -e "${RED}❌ Revoked access for $IP on port $PORT${NC}"
            fi
          done

          echo -e "${CYAN}\nReturning to main menu in 2s...${NC}"
          sleep 2
          break
        done
        ;;

      3)
        echo -e "\n${YELLOW}${BOLD}📡 Current Access List:${NC}"
        ips_8545=$(sudo iptables -L INPUT -n | grep "tcp dpt:8545" | grep ACCEPT | awk '{print $4}')
        ips_3500=$(sudo iptables -L INPUT -n | grep "tcp dpt:3500" | grep ACCEPT | awk '{print $4}')

        mapfile -t list_8545 <<< "$ips_8545"
        mapfile -t list_3500 <<< "$ips_3500"

        both_ports=(); only_8545=(); only_3500=()

        for ip in "${list_8545[@]}"; do
          [[ " ${list_3500[*]} " == *" $ip "* ]] && both_ports+=("$ip") || only_8545+=("$ip")
        done
        for ip in "${list_3500[@]}"; do
          [[ ! " ${list_8545[*]} " == *" $ip "* ]] && only_3500+=("$ip")
        done

        if [[ ${#both_ports[@]} -eq 0 && ${#only_8545[@]} -eq 0 && ${#only_3500[@]} -eq 0 ]]; then
          echo -e "${RED}❌ No IPs have access.${NC}"
        else
          [[ ${#both_ports[@]} -gt 0 ]] && echo -e "${CYAN}🔁 Both Ports (8545 & 3500):${NC}" && for ip in "${both_ports[@]}"; do echo -e "   ${GREEN}- $ip"; done
          [[ ${#only_8545[@]} -gt 0 ]] && echo -e "${CYAN}🔸 Port 8545 only:${NC}" && for ip in "${only_8545[@]}"; do echo -e "   ${GREEN}- $ip"; done
          [[ ${#only_3500[@]} -gt 0 ]] && echo -e "${CYAN}🔸 Port 3500 only:${NC}" && for ip in "${only_3500[@]}"; do echo -e "   ${GREEN}- $ip"; done
        fi
        read -p $'\nPress enter to return to menu...' dummy
        ;;

      4)
        DETECTED_IP=$(curl -s ifconfig.me)
        echo -e "${CYAN}🌐 Detected Public IP: ${GREEN}$DETECTED_IP${NC}"
        echo -ne "${CYAN}📥 Press Enter to use it, or type your own IP/domain: ${NC}"
        read custom_ip
        [[ -z "$custom_ip" ]] && IP="$DETECTED_IP" || IP="$custom_ip"

        echo -e "\n${GREEN}🔗 RPC Endpoints:"
        echo -e "   • Sepolia : ${CYAN}http://$IP:8545${NC}"
        echo -e "   • Beacon  : ${CYAN}http://$IP:3500${NC}\n"
        read -p $'Press enter to return to menu...' dummy
        ;;

      5) break ;;
      *) echo -e "${RED}❌ Invalid choice. Try again.${NC}" ;;
    esac
  done
}



handle_choice() {
  case "$1" in
    1)
      install_dependencies
      install_docker
      check_ports
      create_directories
      write_compose_file
      start_services
      ;;
    2)
      if [ -f "$BASE_DIR/docker-compose.yml" ]; then
        cd "$BASE_DIR"
        echo -e "${YELLOW}📜 Showing logs... Ctrl+C to exit.${NC}"
        sudo docker compose logs -f
      else
        echo -e "${RED}❌ No docker-compose.yml found. Please run installation first.${NC}"
      fi
      ;;
    3)
      check_node_status
      ;;
    4)
      print_rpc_endpoints
      ;;
    5)
      access_controller
      ;;
    6)
      echo -e "${CYAN}👋 Goodbye!${NC}"
      exit 0
      ;;
    *)
      echo -e "${RED}❌ Invalid input. Enter 1, 2, 3, or 4.${NC}"
      ;;
  esac
}

main() {
  while true; do
    print_banner
    read -r choice
    handle_choice "$choice"
    echo ""
    read -rp "Press Enter to return to the menu..."
  done
}

main