.PHONY: clean-certs
clean-certs:
	find certs/ -type f ! -name '.gitignore' -delete

.PHONY: tofu-init
tofu-init:
	make -C opentofu/ init

.PHONY: tofu-apply
tofu-apply: clean-certs
	make -C opentofu/ apply

.PHONY: tofu-destroy
tofu-destroy:
	make -C opentofu/ destroy

.PHONY: init
init: tofu-destroy tofu-apply

.PHONY: regenerate-certs
regenerate-certs: clean-certs
	ansible-playbook -i inventories/staging/ deploy.yaml --tags common --vault-password-file .pass

.PHONY: deploy
deploy:
	ansible-playbook --vault-pass-file=.pass deploy.yaml

.PHONY: bootstrap
bootstrap:
	ansible-playbook --vault-pass-file=.pass bootstrap.yaml

.PHONY: reset
reset:
	ansible-playbook --vault-pass-file=.pass reset.yaml

.PHONY: install-ca
install-ca:
	cp certs/koji_ca_cert.crt /etc/pki/ca-trust/source/anchors/koji_ca_cert.crt
	update-ca-trust

.PHONY: remove-ca
remove-ca:
	rm -f /etc/pki/ca-trust/source/anchors/koji_ca_cert.crt
	update-ca-trust