<?php

namespace App\Services\Ssl;

use Illuminate\Support\Facades\Http;
use Illuminate\Support\Facades\Log;

/**
 * Reports certificates this app issued (per hosting node) to Ladill Domains'
 * central SSL registry, so Domains is the single source of truth for every
 * platform certificate. Best-effort and non-blocking — issuance stays local.
 */
class CentralSslRegistry
{
    public function register(string $host, ?\DateTimeInterface $expiresAt = null): void
    {
        $url = rtrim((string) config('domains.api_url'), '/');
        $key = (string) config('domains.api_key');
        if ($url === '' || $key === '' || $host === '') {
            return;
        }

        try {
            Http::withToken($key)->acceptJson()->timeout(10)
                ->post($url.'/ssl/register', array_filter([
                    'host' => $host,
                    'status' => 'active',
                    'expires_at' => $expiresAt?->format(DATE_ATOM),
                ]));
        } catch (\Throwable $e) {
            Log::info('CentralSslRegistry: register skipped', ['host' => $host, 'error' => $e->getMessage()]);
        }
    }
}