terraform {
  required_providers {
    poweradmin = {
      source  = "poweradmin/poweradmin"
      version = "~> 0.1"
    }
  }
}

# Using API Key authentication (recommended)
provider "poweradmin" {
  api_url = "https://dns.example.com"
  api_key = var.poweradmin_api_key
}

# Using Basic Authentication
provider "poweradmin" {
  api_url  = "https://dns.example.com"
  username = var.poweradmin_username
  password = var.poweradmin_password
}

# API version is optional - defaults to v2
provider "poweradmin" {
  api_url     = "https://dns.example.com"
  api_key     = var.poweradmin_api_key
  api_version = "v2"  # Only v2 is supported (Poweradmin 4.1.0+), this is the default
}

resource "poweradmin_zone" "example_com" {
  name        = "example.com"
  type        = "MASTER"
  description = "Example zone managed by Terraform"
}

resource "poweradmin_zone" "slave_zone" {
  name    = "slave.example.com"
  type    = "SLAVE"
  masters = "192.0.2.1,192.0.2.2"
}

# A record
resource "poweradmin_record" "www" {
  zone_id = poweradmin_zone.example_com.id
  name    = "www"
  type    = "A"
  content = "192.0.2.100"
  ttl     = 3600
}

# CNAME record
resource "poweradmin_record" "blog" {
  zone_id = poweradmin_zone.example_com.id
  name    = "blog"
  type    = "CNAME"
  content = "www.example.com."
  ttl     = 7200
}

# MX record with priority
resource "poweradmin_record" "mail" {
  zone_id  = poweradmin_zone.example_com.id
  name     = "@"
  type     = "MX"
  content  = "mail.example.com."
  ttl      = 3600
  priority = 10
}

# RRSet with multiple A records (load balancing)
resource "poweradmin_rrset" "web_servers" {
  zone_id = poweradmin_zone.example_com.id
  name    = "www"
  type    = "A"
  ttl     = 300

  records = [
    { content = "192.0.2.10", disabled = false },
    { content = "192.0.2.11", disabled = false },
    { content = "192.0.2.12", disabled = false },
  ]
}

# RRSet with MX records
resource "poweradmin_rrset" "mail" {
  zone_id = poweradmin_zone.example_com.id
  name    = "@"
  type    = "MX"
  ttl     = 3600

  records = [
    { content = "mail1.example.com.", priority = 10, disabled = false },
    { content = "mail2.example.com.", priority = 20, disabled = false },
  ]
}

resource "poweradmin_user" "dns_admin" {
  username    = "dns.admin"
  fullname    = "DNS Administrator"
  email       = "dns-admin@example.com"
  password    = var.dns_admin_password
  active      = true
  description = "DNS team administrator"
  perm_templ  = 1  # Administrator permission template
}

# Look up an existing zone
data "poweradmin_zone" "existing" {
  name = "existing.example.com"
}

# Query all A records in a zone
data "poweradmin_records" "a_records" {
  zone_id = data.poweradmin_zone.existing.id
  type    = "A"
}

# Query all RRSets in a zone
data "poweradmin_rrsets" "all" {
  zone_id = data.poweradmin_zone.existing.id
}

# Look up a permission
data "poweradmin_permission" "zone_edit" {
  name = "zone_content_edit_own"
}

# Use the zone in a resource
resource "poweradmin_record" "api" {
  zone_id = data.poweradmin_zone.existing.id
  name    = "api"
  type    = "A"
  content = "192.0.2.50"
  ttl     = 3600
}