<?php
$endpoint = getenv('MTLS_URL') ?: 'https://api.example.net/health';

$certPath = getenv('MTLS_CERT') ?: '/etc/myapp/mtls/client.crt';
$keyPath = getenv('MTLS_KEY') ?: '/etc/myapp/mtls/client.key';
$caPath = getenv('MTLS_CA') ?: '/etc/myapp/mtls/api-ca.pem';

$ch = curl_init($endpoint);

curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_SSLCERT => $certPath,
    CURLOPT_SSLKEY => $keyPath,
    CURLOPT_CAINFO => $caPath,
    CURLOPT_SSL_VERIFYPEER => true,
    CURLOPT_SSL_VERIFYHOST => 2,
    CURLOPT_TIMEOUT => 15,
    CURLOPT_HTTPHEADER => [
        'Accept: application/json',
    ],
]);

$response = curl_exec($ch);

if ($response === false) {
    fwrite(STDERR, 'cURL error: ' . curl_error($ch) . PHP_EOL);
    curl_close($ch);
    exit(1);
}

$statusCode = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
curl_close($ch);

echo "HTTP status: {$statusCode}\n";
echo $response;

if ($statusCode >= 400) {
    exit(1);
}