BACKEND_TF := $(wildcard infra/backend/*.tf)
ENVIRONMENT := production

include $(PWD)/src/toolchain/Makefile

.PHONY:
clean:
	rm -rf $(CACHE_DIR)

.PHONY:
credentials: \
	$(CACHE_DIR)/secrets/credentials.tfvars

infra/backend/.terraform: $(BACKEND_TF)
	env -C infra/backend terraform init

infra/backend/terraform.tfstate: infra/backend/.terraform
	env -C infra/backend terraform apply -state $@ -var-file $<

config/$(ENVIRONMENT).tfbackend: infra/backend/$(ENVIRONMENT).tfstate
	env -C infra/backend terraform output -state $< > $@

.PHONY:
plan: $(CACHE_DIR)/secrets/credentials.tfvars config/$(ENVIRONMENT).tfbackend
	env -C infra/main terraform plan -var-file $<

$(CACHE_DIR)/secrets:
	mkdir -p $@

cache/secrets/%.tfvars: secrets/%.tfvars.gpg $(CACHE_DIR)/secrets
	gpg --decrypt $< > $@

$(FETCH_DIR)/terraform:
	$(call git_clone,$@,$(TERRAFORM_REPO),$(TERRAFORM_REF))

$(OUT_DIR)/terraform: $(FETCH_DIR)/terraform
	$(call toolchain,$(USER)," \
		cd $(FETCH_DIR)/terraform && \
		export SSL_CERT_DIR=/etc/ssl/certs && \
		export CGO_ENABLED=0 && \
		go build \
			-v \
			-trimpath \
			-ldflags='-w -extldflags=-static' \
			-o /home/build/$@ \
	")