#!/bin/ksh
set -e -u -o pipefail

err() {
	printf "%s: %s\n" "${0##*/}" "$1" 1>&2
	exit 1
}

(( CERTBOT_REMAINING_CHALLENGES == 0 )) || err 'more than one domain'

ident=${CERTBOT_IDENTIFIER%.}
fqdn=$(hostname)

# shellcheck disable=SC2053
[[ $ident == $fqdn || $ident == *.$fqdn ]] || err 'non-local identifier'

zone=${fqdn#"$(hostname -s)."}
record=${ident%".$zone"}

yc-dyndns "$@" --debug \
    --record "$record" \
    --zone   "$zone"   \
    --acme   "$CERTBOT_VALIDATION" |
	jq --slurp last
