#!/usr/bin/env bash
# Validates the reference deployment's Compose files (ADR 0044) in each supported combination:
# base, base + proxy, and base + proxy + tunnel. Uses only the committed example env files, copied
# to a temporary directory, so it needs no secret and starts nothing.

set -Eeuo pipefail

repository_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)"
cd "$repository_root/deploy"

work="$(mktemp -d)"
trap 'rm -rf "$work"' EXIT

for name in ekklesia postgres object-storage tunnel; do
  cp "env/${name}.env.example" "$work/${name}.env"
done
cp env/compose.env.example "$work/compose.env"
cat >>"$work/compose.env" <<EOF_ENV
EKKLESIA_IMAGE=registry.example.org/ekklesia:0.0.0
EKKLESIA_ENV_DIR=${work}
EKKLESIA_HOSTNAME=ekklesia.example.org
EKKLESIA_STORAGE_HOSTNAME=storage.ekklesia.example.org
EKKLESIA_ACME_EMAIL=operator@example.org
EOF_ENV

combinations=(
  "compose.yaml"
  "compose.yaml compose.proxy.yaml"
  "compose.yaml compose.proxy.yaml compose.tunnel.yaml"
)
for combination in "${combinations[@]}"; do
  arguments=()
  for file in $combination; do
    arguments+=(--file "$file")
  done
  if ! docker compose --env-file "$work/compose.env" "${arguments[@]}" --profile ops config --quiet; then
    echo "Reference deployment Compose configuration is invalid: ${combination}" >&2
    exit 1
  fi
  echo "valid: ${combination}"
done