.DEFAULT_GOAL := help
SHELL := /usr/bin/env bash
COMPOSE := docker compose

# Pull COREDNS_IMAGE and friends into the recipe env. The .env file is
# also auto-loaded by `docker compose` itself, but `include` makes the
# values available in shell snippets within Makefile recipes too.
include .env
export

.PHONY: help regen up down restart logs ps test axfr-test

help: ## Show this help
	@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf "  \033[36m%-12s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST)

regen: ## Re-generate Corefile from ../zones/*.zone
	@./scripts/generate-secondary-corefile.sh

up: ## Start the secondary
	$(COMPOSE) up -d
	@sleep 2 && $(COMPOSE) logs --tail=20 coredns

down: ## Stop & remove containers
	$(COMPOSE) down

restart: ## Restart CoreDNS (does NOT regen Corefile)
	$(COMPOSE) restart coredns

logs: ## Tail CoreDNS logs
	$(COMPOSE) logs -f coredns

ps: ## Show container status
	$(COMPOSE) ps

# ---------------------------------------------------------------------------
# Smoke tests — these query the LOCAL CoreDNS (this machine)
# ---------------------------------------------------------------------------

test: ## Smoke-test plain DNS against the local secondary
	@echo "=== SOA for supported.systems (should match dell01 + HE) ==="
	@dig @127.0.0.1 supported.systems SOA +short +tries=1 +time=3
	@echo "=== NS records for supported.systems ==="
	@dig @127.0.0.1 supported.systems NS +short +tries=1 +time=3
	@echo "=== A record for ns.supported.systems (the glue) ==="
	@dig @127.0.0.1 ns.supported.systems A +short +tries=1 +time=3

axfr-test: ## Verify AXFR pull from dell01 works (TCP/53 to primary)
	@echo "Probing TCP/53 reachability to dell01 (154.27.180.210)..."
	@timeout 5 bash -c "</dev/tcp/154.27.180.210/53" && echo "  ✓ TCP/53 open" \
		|| (echo "  ✗ TCP/53 BLOCKED — add this server's IP to dell01's FortiWiFi allow list" && exit 1)
	@echo "Attempting AXFR for supported.systems..."
	@dig @154.27.180.210 supported.systems AXFR +tcp +tries=1 +time=8 +short | head -5