#!/usr/bin/env bash
# Local test (Phase 4 §29): renders infra/docker/platform/docker-compose.production.yml's
# Jinja2 placeholders with disposable dummy values and confirms `docker compose config`
# accepts the result — catches YAML/schema errors before Ansible ever touches a real host.
# This does NOT prove the real production values work (env_file paths under /etc/rootnode/
# won't exist locally, which docker compose only warns about, not a fatal error), and does NOT
# validate anything hardware/network-dependent.
set -euo pipefail
cd "$(dirname "$0")/../docker/platform"

TMPDIR="$(mktemp -d)"
trap 'rm -rf "$TMPDIR"' EXIT

for f in platform.env provisioner.env gateway.env postgres.env; do touch "$TMPDIR/$f"; done

sed \
  -e 's/{{ rootnode_data_root }}/\/tmp\/rootnode-test-data/g' \
  -e 's/{{ registry }}/registry.example.com/g' \
  -e 's/{{ image_tag }}/test/g' \
  -e 's/{{ postgres_exporter_user }}/exporter/g' \
  -e 's/{{ postgres_exporter_password }}/dummy/g' \
  -e "s#/etc/rootnode/platform.env#$TMPDIR/platform.env#" \
  -e "s#/etc/rootnode/provisioner.env#$TMPDIR/provisioner.env#" \
  -e "s#/etc/rootnode/gateway.env#$TMPDIR/gateway.env#" \
  -e "s#/etc/rootnode/postgres.env#$TMPDIR/postgres.env#" \
  docker-compose.production.yml > "$TMPDIR/docker-compose.yml"

echo "--- docker compose config ---"
docker compose -f "$TMPDIR/docker-compose.yml" config --quiet
echo "OK: production compose file is well-formed YAML and passes docker compose's own schema validation"

echo
echo "--- Caddyfile syntax (real caddy validate) ---"
sed -e 's/{{ academy_domain }}/academy.example.com/g' -e 's/{{ management_cidr }}/203.0.113.0\/24/g' \
  Caddyfile.j2 > "$TMPDIR/Caddyfile"
chmod a+r "$TMPDIR/Caddyfile"
docker run --rm -v "$TMPDIR:/etc/caddy:ro" caddy:2-alpine caddy validate --config /etc/caddy/Caddyfile 2>&1 | grep -q "Valid configuration" \
  && echo "OK: Caddyfile is valid" || { echo "FAIL: Caddyfile did not validate"; exit 1; }