#!/usr/bin/env bash
set -euo pipefail

# shellcheck source=scripts/meta/env/load.sh
source scripts/meta/env/load.sh

: "${INFINITO_DNS_IP:?Missing INFINITO_DNS_IP in .env}"
: "${INFINITO_DOMAIN:?Missing INFINITO_DOMAIN in .env}"
: "${INFINITO_IP4:?Missing INFINITO_IP4 in .env}"
: "${INFINITO_CONTAINER:?Missing INFINITO_CONTAINER env (e.g. infinito_nexus_arch)}"

SUBDOMAIN="foo.${INFINITO_DOMAIN}"
IP4_EXPECTED="${INFINITO_IP4}"

section() {
	echo
	echo "------------------------------------------------------------"
	echo "$1"
	echo "------------------------------------------------------------"
}

ok() { echo "OK:   $*"; }
warn() { echo "WARN: $*"; }
fail() {
	echo "FAIL: $*"
	exit 1
}

echo "============================================================"
echo " DNS TEST SUITE"
echo "============================================================"
echo "INFINITO_DNS_IP     = ${INFINITO_DNS_IP}"
echo "INFINITO_DOMAIN     = ${INFINITO_DOMAIN}"
echo "SUBDOMAIN  = ${SUBDOMAIN}"
echo "EXPECT IP  = ${IP4_EXPECTED}"
echo "INFINITO   = ${INFINITO_CONTAINER}"
echo

section "Host -> CoreDNS (direct queries)"

if command -v dig >/dev/null 2>&1; then
	a1="$(dig @"${INFINITO_DNS_IP}" "${INFINITO_DOMAIN}" A +short | head -n1 || true)"
	a2="$(dig @"${INFINITO_DNS_IP}" "${SUBDOMAIN}" A +short | head -n1 || true)"

	if [ "${a1}" = "${IP4_EXPECTED}" ]; then
		ok "${INFINITO_DOMAIN} A -> ${a1}"
	else
		fail "${INFINITO_DOMAIN} A failed (got '${a1}')"
	fi

	if [ "${a2}" = "${IP4_EXPECTED}" ]; then
		ok "${SUBDOMAIN} A -> ${a2}"
	else
		fail "${SUBDOMAIN} A failed (got '${a2}')"
	fi
else
	warn "dig not found on host — skipping host direct DNS tests"
fi

section "Host -> CoreDNS (AAAA sanity check)"

if command -v dig >/dev/null 2>&1; then
	aaaa1="$(dig @"${INFINITO_DNS_IP}" "${INFINITO_DOMAIN}" AAAA +comments +noall +answer || true)"
	aaaa2="$(dig @"${INFINITO_DNS_IP}" "${SUBDOMAIN}" AAAA +comments +noall +answer || true)"

	echo "AAAA ${INFINITO_DOMAIN}:"
	echo "${aaaa1:-<empty>}"
	echo

	echo "AAAA ${SUBDOMAIN}:"
	echo "${aaaa2:-<empty>}"
	echo

	status1="$(dig @"${INFINITO_DNS_IP}" "${INFINITO_DOMAIN}" AAAA +comments 2>&1 | grep -i status || true)"
	status2="$(dig @"${INFINITO_DNS_IP}" "${SUBDOMAIN}" AAAA +comments 2>&1 | grep -i status || true)"

	echo "${status1}"
	echo "${status2}"

	echo "${status1}" | grep -qi "SERVFAIL" && fail "AAAA lookup returned SERVFAIL for ${INFINITO_DOMAIN}"
	echo "${status2}" | grep -qi "SERVFAIL" && fail "AAAA lookup returned SERVFAIL for ${SUBDOMAIN}"

	ok "AAAA sanity check passed (no SERVFAIL)"
else
	warn "dig not found on host — skipping AAAA sanity test"
fi

section "CoreDNS container status"

_coredns_name="${INFINITO_RUNNER_PREFIX:-}-coredns"
if docker ps --filter name="${_coredns_name}" --format '{{.Names}}' | grep -q "${_coredns_name}"; then
	docker ps --filter name="${_coredns_name}" --format 'table {{.Names}}\t{{.Status}}\t{{.Image}}'
	docker logs --tail=10 "${_coredns_name}" || true # nocheck: shell-or-true -- grandfathered: worked in practice; TODO: sharpen to catch only the exact tolerated error
	ok "CoreDNS container is running"
else
	fail "CoreDNS container not running"
fi

section "Infinito container (outer) DNS"

docker exec "${INFINITO_CONTAINER}" sh -lc "
  set -e

  echo '>>> /etc/resolv.conf'
  cat /etc/resolv.conf || true  # nocheck: shell-or-true -- grandfathered: worked in practice; TODO: sharpen to catch only the exact tolerated error
  echo

  echo '>>> getent hosts'
  h1=\$(getent hosts ${INFINITO_DOMAIN} | awk '{print \$1}' || true)
  h2=\$(getent hosts ${SUBDOMAIN} | awk '{print \$1}' || true)

  echo \"${INFINITO_DOMAIN} -> \${h1}\"
  echo \"${SUBDOMAIN} -> \${h2}\"

  [ \"\${h1}\" = \"${IP4_EXPECTED}\" ] || exit 11
  [ \"\${h2}\" = \"${IP4_EXPECTED}\" ] || exit 12
"

ok "Outer container DNS works"

section "DONE"
echo "DNS chain is fully functional:"
echo "Host -> CoreDNS -> Outer container -> Inner container"