image: debian:stable-slim

stages:
- build
- deploy

build:
  stage: build
  before_script:
    - apt-get update
    - apt-get install -y knot-dnsutils
  script:
    - |
      for zonefile in zones/*; do
          zone=$(basename $zonefile .zone)
          echo "Checking zone $zone..."
          kzonecheck -v -o $zone $zonefile
          echo $(echo -n $zone | sha1sum | cut -f1 -d' ').zones 0 IN PTR $zone. >> catalog-zones/dns-witch-catalog.zone
      done
  artifacts:
    paths:
      - catalog-zones/*
    expire_in: 1 day

deploy:
  stage: deploy
  script:
    - scp -r zones catalog-zones ${SSH_PRIMARY_NS}:/var/lib/knot/
    - ssh ${SSH_PRIMARY_NS} /usr/sbin/knotc reload
  before_script:
    - apt-get update
    - apt-get install -y ssh-client
      # from https://docs.gitlab.com/ee/ci/ssh_keys/
    - eval $(ssh-agent -s)
    - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
    - mkdir -p $HOME/.ssh
    - chmod 700 $HOME/.ssh
    - echo "$SSH_KNOWN_HOSTS" >> $HOME/.ssh/known_hosts
    - echo "$SSH_CONFIG" >> $HOME/.ssh/config
    - chmod 644 $HOME/.ssh/{known_hosts,config}
#  when: manual