# Credit: https://github.com/kgaughan/zones

"""
Custom Ansible template filters for DNS management.

WARNING:
The templating is done on the local/control machine!
"""

import os
import datetime
import shlex
import subprocess


def which(cmd):
    for path in os.environ["PATH"].split(os.pathsep):
        full_path = os.path.join(path, cmd)
        if os.access(full_path, os.X_OK):
            return full_path
    return None


def run_query(cmd, rtype, fqdn, ns=None):
    if not fqdn.endswith("."):
        fqdn += "."
    args = [cmd, fqdn, rtype]
    if ns:
        args.append("@" + ns)

    output = subprocess.check_output(args, universal_newlines=True)
    for line in output.split("\n"):
        if line.startswith(";"):
            continue
        parsed = shlex.split(line)
        if len(parsed) > 0 and parsed[0] == fqdn and parsed[3] == rtype:
            yield parsed[4:]


def next_serial(fqdn):
    """
    Generate the next serial number for the DNS SOA record.
    """
    for cmd in ["drill", "dig"]:
        cmd_path = which(cmd)
        if cmd_path:
            break
    if cmd_path is None:
        raise Exception("Cannot find %s" % cmd)

    nss = [line[0] for line in run_query(cmd_path, "NS", fqdn)]
    current_serial = None
    for ns in nss:
        try:
            for line in run_query(cmd_path, "SOA", fqdn, ns):
                current_serial = line[2]
                break
        except subprocess.CalledProcessError as e:
            if e.returncode not in [9]:
                raise
        if current_serial is not None:
            break

    today = datetime.datetime.utcnow().strftime("%Y%m%d")
    if current_serial is None or current_serial[:8] != today:
        return today + "00"
    else:
        return str(int(current_serial) + 1)


def dkim_record(privkey, selector="mail"):
    """
    Generate the DKIM record from the given private key.

    The long key strings is NOT joined due to the length limit of a
    DNS record.

    Example
    -------
    mail._domainkey	IN	TXT	( "v=DKIM1; k=rsa; s=email; "
        "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7LZbXj5HBjT5yoMCnCd"
        "5eBLBZ1s/WP0hPQSignjEu4pCtOsPf7f/knhDDD7eMOSlOAa91Dq6e8B0aNKfV2m"
        "7e88SvHLnWVhH+kUNIdSQRTrTL6Pt1WAH0XjgDcd0f2MB+ho5GIeRJnLWHoRtrSU"
        "oBKgMxnvW8aco/Z/z0/qn5Tcsrz7wP/W7c/eX38SRuanrKUVnE8FqvvshZzaPfqe"
        "46WrqKDI6mfeYa0up/1ikUWgAHKVZEXTUCPVBUXxHbyK7a6MgZW+BYkYEeypMnYV"
        "iq9k+TIHNNjlGbOLXqujn2j/L0r7ORjZX16C1qNf54qvMeklDK1+8KW872F6s+kV"
        "KwIDAQAB" )
    """
    cmd = ['openssl', 'rsa', '-pubout', '-outform', 'PEM']
    p = subprocess.Popen(cmd, universal_newlines=True,
                         stdin=subprocess.PIPE,
                         stdout=subprocess.PIPE,
                         stderr=subprocess.PIPE)
    pubkey, stderr = p.communicate(privkey)
    if p.returncode:
        raise Exception("openssl failed to extract the public key")

    lines = [l for l in pubkey.split('\n')
             if len(l) > 0 and l[0] != '-']
    lines[0] = 'p=' + lines[0]
    lines = ['\t\t"' + l + '"' for l in lines]
    lines[-1] += ' )'
    record = [
        selector+'._domainkey\tIN\tTXT\t( "v=DKIM1; k=rsa; s=email; "'
    ] + lines
    return record


class FilterModule(object):
    def filters(self):
        return {
            "next_serial": next_serial,
            "dkim_record": dkim_record,
        }