#!/usr/bin/env sh
set -eu

test_dir="$(mktemp -d)"
cleanup() {
  rm -rf "$test_dir"
}
trap cleanup EXIT

openssl req -x509 -newkey rsa:2048 -nodes -days 1 \
  -subj "/CN=auth.example.test" \
  -keyout "$test_dir/tls.key" \
  -out "$test_dir/tls.crt" >/dev/null 2>&1

docker run --rm \
  --add-host keycloak:127.0.0.1 \
  -v "$PWD/deploy/tls/nginx.conf:/etc/nginx/nginx.conf:ro" \
  -v "$test_dir:/etc/tls:ro" \
  nginx:1.29-alpine nginx -t

docker run --rm \
  --add-host keycloak:127.0.0.1 \
  -v "$PWD/deploy/tls/Caddyfile:/etc/caddy/Caddyfile:ro" \
  -v "$test_dir:/etc/tls:ro" \
  caddy:2.10.2-alpine caddy validate --config /etc/caddy/Caddyfile

echo "nginx and Caddy HTTPS termination configurations verified"