#!/bin/bash
# Disable WP-Cron across every WordPress install under /home/*/public_html
# (and addon docroots), then schedule a system cron with a per-site
# stagger so wp-cron runs every 15 minutes, not on every page hit.
#
# Idempotent: re-running adds nothing; removing the marker re-applies.
# Dry-run: pass --dry-run to print actions without changing anything.
 
set -euo pipefail
 
DRY_RUN=0
LOG=/var/log/disable-wp-cron-fleet.log
MARKER='// SGUARD: WP-Cron disabled by disable-wp-cron-fleet.sh'
 
[[ "${1:-}" == "--dry-run" ]] && DRY_RUN=1
 
log() { echo "[$(date -Is)] $*" | tee -a "$LOG"; }
 
run() {
  if [[ $DRY_RUN -eq 1 ]]; then
    log "DRY-RUN: $*"
  else
    log "RUN: $*"
    eval "$@"
  fi
}
 
stagger_minute() {
  # Stable per-site minute in [0,14] derived from the cPanel user.
  local user=$1
  printf '%d' $(( $(echo -n "$user" | cksum | awk '{print $1}') % 15 ))
}

# Iterate cPanel users from /etc/trueuserdomains so we skip system
# users and reseller sub-accounts cleanly.
while IFS=: read -r domain user; do
  user=${user# }
  home=$(getent passwd "$user" | cut -d: -f6)
  [[ -z "$home" ]] && continue
 
  # Find every wp-config.php under this user's home. Addon domains
  # live under public_html/<addon>/ so a single -path covers them.
  while IFS= read -r -d '' wpc; do
    docroot=$(dirname "$wpc")
    [[ -f "$docroot/wp-load.php" ]] || continue
 
    if grep -qF "$MARKER" "$wpc"; then
      log "skip $wpc (already disabled)"
      continue
    fi
 
    # Insert the constant just before "/* That's all" so it lands
    # before WordPress includes wp-settings.php.
    run "sed -i.bak \"/\\/\\* That's all/i $MARKER\\\\ndefine('DISABLE_WP_CRON', true);\" '$wpc'"
 
    minute=$(stagger_minute "$user")
    cronline="$minute,$((minute+15)),$((minute+30)),$((minute+45)) * * * * cd $docroot && /usr/local/bin/php -d memory_limit=512M wp-cron.php >/dev/null 2>&1"
 
    # Append to the user's crontab without clobbering existing entries.
    run "(crontab -u '$user' -l 2>/dev/null; echo '# SGUARD wp-cron stagger'; echo \"$cronline\") | crontab -u '$user' -"
    log "enabled system cron for $user at minute $minute (stagger 15m)"
  done < <(find "$home/public_html" -maxdepth 4 -name wp-config.php -print0 2>/dev/null)
done < /etc/trueuserdomains
 
log "done"

disable-wp-cron-fleet.sh --dry-run | tee /tmp/wp-cron-plan.txt