zone

var ErrDuplicate = fmt.Errorf("duplicate record")

var ErrNoZoneInList = fmt.Errorf("no zone in list")

var ErrNonExistentDomain = errors.New("non-existent domain")

var QueryWithDNSSEC = func() QueryOption {
	return func(o *queryOptions) {
		o.dnssec = true
	}
}

var WithDNSSEC = func(algo dnssec.SigningAlgorithm, nsec dnssec.NextSecure) ZoneOption {
	return func(_ context.Context, z *Zone) error {
		z.dnssecEnabled = true
		z.signingAlgorithm = algo
		return nil
	}
}

var WithDefaultTTL = func(ttl uint32) ZoneOption {
	return func(_ context.Context, z *Zone) error {
		z.defaultTTL = ttl
		return nil
	}
}

var WithKSK = func(algo dnssec.SigningAlgorithm, key []byte) ZoneOption {
	return func(ctx context.Context, z *Zone) error {
		sgn, err := dnssec.SignerFromBytes(algo, key)
		if err != nil {
			return err
		}
		pk, err := dnssec.PublicKeyBase64(sgn.Public())
		if err != nil {
			return err
		}
		ksk := &dns.DNSKEY{
			Hdr: dns.RR_Header{
				Name:   z.name.Fqdn(),
				Rrtype: dns.TypeDNSKEY,
				Class:  dns.ClassINET,
				Ttl:    z.defaultTTL,
			},
			Flags:     dns.ZONE | dns.SEP,
			Protocol:  dnssec.DNSKEY_PROTOCOL,
			Algorithm: uint8(algo),
			PublicKey: pk,
		}
		z.ksk = sgn
		z.kskTag = ksk.KeyTag()
		return z.Add(ctx, mindnspb.ProtoRRFromDns(ksk))
	}
}

var WithZSK = func(algo dnssec.SigningAlgorithm, key []byte) ZoneOption {
	return func(ctx context.Context, z *Zone) error {
		sgn, err := dnssec.SignerFromBytes(algo, key)
		if err != nil {
			return err
		}
		pk, err := dnssec.PublicKeyBase64(sgn.Public())
		if err != nil {
			return err
		}
		zsk := &dns.DNSKEY{
			Hdr: dns.RR_Header{
				Name:   z.name.Fqdn(),
				Rrtype: dns.TypeDNSKEY,
				Class:  dns.ClassINET,
				Ttl:    z.defaultTTL,
			},
			Flags:     dns.ZONE,
			Protocol:  dnssec.DNSKEY_PROTOCOL,
			Algorithm: uint8(algo),
			PublicKey: pk,
		}
		z.zsk = sgn
		z.zskTag = zsk.KeyTag()
		return z.Add(ctx, mindnspb.ProtoRRFromDns(zsk))
	}
}