1import * as _ from 'lodash-es'
2import { getKlusterCtx } from './ctxF/klusterCtxF.mts'
3import { isWcDnsSuffix } from '../harvF/getWcSuffixF.mts'
4import { PtErr } from '../../sharedF/throwErrorF/sharedErrF.mts'
5import { assertTruthy } from '../../sharedF/assertsF/assertTruthyAI.mts'
6import { throwIf } from '../../sharedF/throwErrorF/throwIfF.mts'
7
8export const getCfProxied = (hostname: string) => {
9  const cfProxied = !isWcDnsSuffix(hostname)
10
11  const numDots = _.chain(hostname).split('.').value().length - 1
12  if (cfProxied && numDots >= 3) {
13    throw new PtErr('CF-proxied hostname has 3+ dots; add a wildcard SAN (e.g. *.<parent-domain>) to klustCertsH', {hostname, numDots, cfProxied})
14  }
15  return cfProxied
16}
17
18const getHostnameDomain = (hostname: string) => {
19  const parts = hostname.split('.')
20  // Return last 2 parts (e.g., "foo.drawinggame.org" -> "drawinggame.org")
21  return parts.slice(-2).join('.')
22}
23
24const validateHostnameInDomainNames = (hostname: string) => {
25  const {domainNames} = getKlusterCtx()
26  if (!domainNames?.length) return // no domainNames configured, skip validation
27  
28  const hostDomain = getHostnameDomain(hostname)
29  const domainMatch = domainNames.some((d: string) => hostDomain === d || hostname.endsWith(`.${d}`))
30  assertTruthy(domainMatch, {hostname, hostDomain, domainNames})
31}
32
33export const getNonWcDns = (hostname: string) => {
34  const {nonWcHostname} = getKlusterCtx()
35
36  if (nonWcHostname) {
37    throwIf(() => nonWcHostname != hostname, {nonWcHostname, hostname})
38    validateHostnameInDomainNames(hostname)
39    return true
40  }
41
42  return getCfProxied(hostname)
43}
44