#!/bin/bash

## Should be executable N time in a row with same result.

. lib/common

set -e

DOMAIN=$(relation-get domain)
TARGET=$(relation-get target)
APACHE_CUSTOM_RULES=$(relation-get apache-custom-rules 2>/dev/null) || true
CREDS=$(relation-get creds 2>/dev/null) || true
SERVER_ALIAS=$(relation-get server-alias 2>/dev/null) || true

export SERVER_ALIAS


if SSL_CERT_LOCATION=$(relation-get ssl-cert-file 2>/dev/null); then
    SSL_CERT=/etc/ssl/certs/${DOMAIN}.pem
    config-add "\
$MASTER_TARGET_CHARM_NAME:
  volumes:
    - ${SSL_CERT_LOCATION}:${SSL_CERT}
"
fi

if SSL_KEY_LOCATION=$(relation-get ssl-key-file 2>/dev/null); then
    SSL_KEY=/etc/ssl/private/${DOMAIN}.key
    config-add "\
$MASTER_TARGET_CHARM_NAME:
  volumes:
    - ${SSL_KEY_LOCATION}:${SSL_KEY}
"
fi

if SSL_CA_CERT_LOCATION=$(relation-get ssl-ca-cert-file 2>/dev/null); then
    SSL_CA_CERT=/etc/ssl/cert/${DOMAIN}-ca.pem
    config-add "\
$MASTER_TARGET_CHARM_NAME:
  volumes:
    - ${SSL_CA_CERT_LOCATION}:${SSL_CA_CERT}
"
fi

control=$(echo "$DOMAIN%$TARGET%$APACHE_CUSTOM_RULES%$CREDS%$SSL_CERT%$SSL_CA_CERT%$SSL_KEY" | md5_compat)

[ "$control" == "$(relation-get control 2>/dev/null)" ] && exit 0

## XXXvlab: could probably figure target ourselves
apache_ssl_proxy_add "$DOMAIN" "$TARGET" "$APACHE_CUSTOM_RULES" "$CREDS"

relation-set control "$control"

info "Configured $DARKYELLOW$BASE_CHARM_NAME$NORMAL for proxy access."