-- +goose Up
-- +goose StatementBegin

-- Domain-Settings die HAProxy pro Domain rendern kann. Bisher
-- hatten Domains nur ein binäres hsts_enabled — jetzt ist HSTS
-- granular (max-age, subdomains, preload) plus Maintenance-Mode
-- und Canonical-www-Redirect.

ALTER TABLE domains
    ADD COLUMN IF NOT EXISTS hsts_max_age        INTEGER NOT NULL DEFAULT 31536000,
    ADD COLUMN IF NOT EXISTS hsts_subdomains     BOOLEAN NOT NULL DEFAULT FALSE,
    ADD COLUMN IF NOT EXISTS hsts_preload        BOOLEAN NOT NULL DEFAULT FALSE,
    ADD COLUMN IF NOT EXISTS maintenance_mode    BOOLEAN NOT NULL DEFAULT FALSE,
    ADD COLUMN IF NOT EXISTS maintenance_message TEXT,
    ADD COLUMN IF NOT EXISTS www_redirect        TEXT NOT NULL DEFAULT '';

-- www_redirect-Werte:
--   ''        — kein Redirect (Default; Domain wird direkt geserved)
--   'to-naked'— www.foo.com → foo.com (canonical naked-domain)
--   'to-www'  — foo.com → www.foo.com (canonical www)
ALTER TABLE domains
    DROP CONSTRAINT IF EXISTS domains_www_redirect_check;
ALTER TABLE domains
    ADD CONSTRAINT domains_www_redirect_check
        CHECK (www_redirect IN ('', 'to-naked', 'to-www'));

-- +goose StatementEnd

-- +goose Down
-- +goose StatementBegin
ALTER TABLE domains DROP CONSTRAINT IF EXISTS domains_www_redirect_check;
ALTER TABLE domains
    DROP COLUMN IF EXISTS www_redirect,
    DROP COLUMN IF EXISTS maintenance_message,
    DROP COLUMN IF EXISTS maintenance_mode,
    DROP COLUMN IF EXISTS hsts_preload,
    DROP COLUMN IF EXISTS hsts_subdomains,
    DROP COLUMN IF EXISTS hsts_max_age;
-- +goose StatementEnd