#!/bin/bash
# Let's Encrypt for kansho.jinkendo.de and dev.kansho.jinkendo.de
# Prerequisites: host nginx installed, ports 80/443 reachable, DNS A/AAAA in place.

set -e

EMAIL="${CERTBOT_EMAIL:-lars@stommer.de}"

echo "=== Let's Encrypt for Kanshō ==="

sudo apt-get update
sudo apt-get install -y certbot python3-certbot-nginx

sudo certbot --nginx \
    -d kansho.jinkendo.de \
    -d dev.kansho.jinkendo.de \
    --email "$EMAIL" \
    --agree-tos \
    --non-interactive \
    --redirect

echo "Check renewal: sudo certbot renew --dry-run"
echo "Timer: sudo systemctl status certbot.timer"