class Falcon::Hosts

def add(host)
	@named[host.authority] = host
end

def each(&block)
	@named.each_value(&block)
end

def endpoint
	@server_endpoint ||= Async::HTTP::Endpoint.parse(
		'https://[::]',
		ssl_context: self.ssl_context,
		reuse_address: true
	)
end

def host_context(socket, hostname)
	if host = @named[hostname]
		Async.logger.debug(self) {"Resolving #{hostname} -> #{host}"}
		
		socket.hostname = hostname
		
		return host.ssl_context
	else
		Async.logger.warn(self) {"Unable to resolve #{hostname}!"}
		
		return nil
	end
end

def initialize(configuration)
	@named = {}
	@server_context = nil
	@server_endpoint = nil
	
	configuration.each(:authority) do |environment|
		add(Host.new(environment))
	end
end

def proxy
	Proxy.new(Falcon::BadRequest, @named)
end

def redirection(secure_endpoint)
	Redirection.new(Falcon::BadRequest, @named, secure_endpoint)
end

def run(container = Async::Container.new, **options)
	secure_endpoint = Async::HTTP::Endpoint.parse(options[:bind_secure], ssl_context: self.ssl_context)
	insecure_endpoint = Async::HTTP::Endpoint.parse(options[:bind_insecure])
	
	secure_endpoint_bound = insecure_endpoint_bound = nil
	
	Async::Reactor.run do
		secure_endpoint_bound = Async::IO::SharedEndpoint.bound(secure_endpoint)
		insecure_endpoint_bound = Async::IO::SharedEndpoint.bound(insecure_endpoint)
	end.wait
	
	container.run(name: "Falcon Proxy", restart: true) do |task, instance|
		proxy = self.proxy
		
		proxy_server = Falcon::Server.new(proxy, secure_endpoint_bound, secure_endpoint.protocol, secure_endpoint.scheme)
		
		proxy_server.run
	end
	
	container.run(name: "Falcon Redirector", restart: true) do |task, instance|
		redirection = self.redirection(secure_endpoint)
		
		redirection_server = Falcon::Server.new(redirection, insecure_endpoint_bound, insecure_endpoint.protocol, insecure_endpoint.scheme)
		
		redirection_server.run
	end
	
	container.attach do
		secure_endpoint_bound.close
		insecure_endpoint_bound.close
	end
	
	return container
end

def ssl_context
	@server_context ||= OpenSSL::SSL::SSLContext.new.tap do |context|
		context.servername_cb = Proc.new do |socket, hostname|
			self.host_context(socket, hostname)
		end
		
		context.session_id_context = "falcon"
		
		context.set_params(
			ciphers: SERVER_CIPHERS,
			verify_mode: OpenSSL::SSL::VERIFY_NONE,
		)
		
		context.setup
	end
end