[[ -z `grep ^certs: /etc/group` ]] && groupadd certs
[[ -z `grep ^certs: /etc/group | grep grafana` ]] && usermod -aG certs grafana

chmod 755 /etc/dehydrated/certs/
# todo - fix permissions only against relevant grafana domain
echo -n fixing permissions against /etc/dehydrated/certs/\*
chgrp -R certs /etc/dehydrated/certs/*
chmod g+rx /etc/dehydrated/certs/*
chmod g+r /etc/dehydrated/certs/*
echo done

echo -n restart grafana ...
systemctl restart grafana-server && echo done
echo