#!/bin/sh

#   -------------------------------------------------------------
#   Deploy Mumble certificate on Murmur
#   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#   Project:        Nasqueron
#   Created:        2016-11-03
#   License:        Trivial work, not eligible to copyright
#   -------------------------------------------------------------

if [ -z "$JAIL_HOSTNAME" ]; then
    JAIL_HOSTNAME=mumble.nasqueron.org
fi

if [ -z "$CERT_DIR" ]; then
    CERT_DIR=/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME
fi

if [ -z "$JAIL_DIR" ]; then
    JAIL_DIR=/usr/local/jails/$JAIL_HOSTNAME
fi

if [ -z "$JAIL_ID" ]; then
    JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`
fi

cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt
cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key

# murmur has uid 338
chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key

jexec $JAIL_ID service murmur restart