#!/bin/ksh

# CONFIGURED BY ANSIBLE

PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin

date -R
echo

# we are a mail server, we are yesterday's jam (enforce rsa)
dehydrated --cron --keep-going --config /etc/dehydrated/config-http01 --algo rsa
echo

for domain in `grep -vE '^$|^#' /etc/dehydrated/domains-http01`; do
	cat /etc/dehydrated/certs/$domain/privkey.pem \
	    /etc/dehydrated/certs/$domain/fullchain.pem \
	    > /etc/dehydrated/certs/$domain/concat.pem
	chmod 400 /etc/dehydrated/certs/$domain/priv*pem
	chmod 400 /etc/dehydrated/certs/$domain/concat.pem
done; unset domain
echo

# need to emulate a terminal to get some output - self-verbose
script -a /var/log/typescript.log postfix reload && echo postfix reloaded
echo

dovecot reload && echo dovecot reloaded
echo

dehydrated --cleanup --config /etc/dehydrated/config-http01
echo

date -R
echo