#!/bin/bash
# SPDX-FileCopyrightText: 2024 Matthew Fennell <matthew@fennell.dev>
#
# SPDX-License-Identifier: AGPL-3.0-only

set -eux

connection_string="$1"
ssh_key="$2"

ssh_args=(-o IdentitiesOnly=yes -F /dev/null -i "${ssh_key}")

# LEGO_CERT_PATH is an environment variable
#shellcheck disable=SC2154
scp "${ssh_args[@]}" "${LEGO_CERT_PATH}" "${connection_string}":~

# LEGO_CERT_KEY_PATH is an environment variable
#shellcheck disable=SC2154
scp "${ssh_args[@]}" "${LEGO_CERT_KEY_PATH}" "${connection_string}":~

ssh "${ssh_args[@]}" -tt "${connection_string}" "sudo mv ~/*.crt ~/*.key /etc/prosody/certs"
ssh "${ssh_args[@]}" -tt "${connection_string}" "sudo chown -R prosody:prosody /etc/prosody/certs"
ssh "${ssh_args[@]}" -tt "${connection_string}" "sudo service prosody reload"