package Trog::Zone;

=head1 Trog::Zone

=head2 DESCRIPTION

Zonefile CRUD

=cut

use strict;
use warnings;

use feature qw{signatures};
no warnings qw{experimental};

use Trog::Config;
use Trog::Data;
use Trog::Vars;
use Trog::SQLite;

use Net::IP;
use Ref::Util;

=head2 zone($domain) = @zonedata

Returns the zone data for the requested zone.
Like any other post in TCMS it's versioned.

=cut

sub zone($domain, $version=undef) {
    my $conf = Trog::Config::get();
    my $data = Trog::Data->new($conf);

    my @zonedata = $data->get( tags => ['zone'], acls => [qw{admin}], title => $domain  );
    @zonedata = grep { $_->{version} == $version } @zonedata if defined $version;
    return @zonedata;
}

=head2 addzone($domain, %options)

Add a post of 'zone' type.

=cut

my $valid_ip = sub {
    return Net::IP->new(shift);
};

my $valid_rev_ip = sub {
    return shift =~ m/\.in-addr\.arpa\.$/;
};

my $valid_rev_ip6 = sub {
    return shift =~ m/\.ip6\.arpa\.$/;
};

my $spec = {
    ip             => $valid_ip,
    ip6            => $valid_ip,
    ip_reversed    => $valid_rev_ip,
    ip6_reversed   => $valid_rev_ip6,
    nameservers    => \&Ref::Util::is_arrayref,
    subdomains     => \&Ref::Util::is_arrayref,
    cnames         => \&Ref::Util::is_arrayref,
    gsv_string     => $Trog::Vars::not_ref,
    dkim_pkey      => $Trog::Vars::not_ref,
    acme_challenge => $Trog::Vars::not_ref,
};

sub addzone($query) {
    my $domain = $query->{title};
    return unless $domain;
    my ($latest) = zone($domain);
    $latest //= {};

    my $conf = Trog::Config::get();
    my $data = Trog::Data->new($conf);

    #XXX TODO make this instead use @records2add, complexity demon BAD
    my $processor = Text::Xslate->new( path => 'www/templates/text' );
    $query->{data} = $processor->render('zone.tx', $query);

    %$latest = (
        %$latest,
        Trog::Vars::filter($query, $spec),
    );

    $data->add($latest);

    #import into pdns
    my ($ttl, $prio, $disabled) = (300, 0, 0);

    my $insert_sql = q{insert into records (domain_id, name, type,content,ttl,prio,disabled) select id , ?, ?, ?, ?, ?, ? from domains where name=?};
    my @records2add = (
        [$query->{title},                    'SOA',  "$query->{title} soa.$query->{title} $query->{version} 10800 3600 604800 10800"],
        [$query->{title},                    'A',    $query->{ip}   ],
        [$query->{title},                    'AAAA', $query->{ip6}  ],
        [$query->{ip_reversed},              'PTR',  $query->{title}],
        [$query->{ip6_reversed},             'PTR',  $query->{title}],
        [$query->{title},                    'MX',   "mail.$query->{title}"],
        ["_smtps._tcp.mail.$query->{title}", 'SRV',  "5 587 ."     ],
        ["_imaps._tcp.mail.$query->{title}", 'SRV',  "5 993 ."     ],
        ["_pop3s._tcp.mail.$query->{title}", 'SRV',  "5 995 ."     ],
        ["_dmarc.$query->{title}",           'TXT',  "v=DMARC1; p=reject; rua=mailto:postmaster\@$query->{title}; ruf=mailto:postmaster\@$query->{title}"],
        ["mail._domainkey.$query->{title}",  'TXT',  "v=DKIM1; h=sha256; k=rsa; t=y; p=$query->{dkim_pkey}"],
        [$query->{title},                    'TXT',  "v=spf1 +mx +a +ip4:$query->{ip} +ip6:$query->{ip6} -all"],
        [$query->{title},                    'TXT',  "google-site-verification=$query->{gsv_string}"],
        ["_acme-challenge.$query->{title}",  'TXT',  $query->{acme_challenge}],
        [$query->{title},                    'CAA',  '0 issue "letsencrypt.org"'],
    );

    push(@records2add, (map { ["$_.$query->{title}", "CNAME", $query->{title}] } @{$query->{cnames}}));
    push(@records2add, (map { [$query->{title}, 'NS', $_] } @{$query->{nameservers}}));
    foreach my $subdomain (@{$query->{subdomains}}) {
        push(@records2add, ["$subdomain->{name}.$query->{title}", 'A',    $subdomain->{ip}]);
        push(@records2add, ["$subdomain->{name}.$query->{title}", 'AAAA', $subdomain->{ip6}]);
        push(@records2add, (map { ["$subdomain->{name}.$query->{title}", 'NS', $_] } @{$subdomain->{nameservers}}));
    }

    my $dbh = _dbh();
    $dbh->begin_work();
    $dbh->do("DELETE FROM records") or _roll_and_die($dbh);
    foreach my $record (@records2add) {
        $dbh->do($insert_sql, undef, @$record, $ttl, $prio, $disabled, $query->{title}) or _roll_and_die($dbh);
    }
    $dbh->commit() or _roll_and_die($dbh);

    return $latest;
}

sub delzone($domain) {
    my $conf = Trog::Config::get();
    my $data = Trog::Data->new($conf);

    my ($latest) = zone($domain);
    return unless $latest;
    return $data->delete($latest);
}

sub _dbh {
    return Trog::SQLite::dbh( undef, "dns/zones.db" );
}

sub _roll_and_die($dbh) {
    my $err = $dbh->errstr;
    $dbh->rollback();
    die $err;
}

1;