#!/bin/sh

MASQUERADE=${MASQUERADE:-127.0.0.1}
ACME_SERVER=${ACME_SERVER:-letsencrypt}
ACME_DNS=${ACME_DNS:-myapi}

if [ ! -d /acme/cert ] ; then
    mkdir -p /acme/cert
fi

if [ -n "${ACME_EMAIL}" ] ; then
    ACME_EMAIL="--accountemail ${ACME_EMAIL}"
fi

if [ ! -f "/acme/cert/cert.pem" ] ; then
    echo "Initializing certificate with acme.sh"
    # shellcheck disable=SC2086
    acme.sh --issue -d "${MASQUERADE}" \
        --home /acme \
        --dns "${ACME_DNS}" \
        --server "${ACME_SERVER}" \
        --cert-file /acme/cert/cert.pem \
        --key-file /acme/cert/privkey.pem \
        --fullchain-file /acme/cert/chain.pem \
        --reloadcmd /app/acme-refresh-cert.sh ${ACME_EMAIL}
    echo "Certificate ready"
else
    /app/acme-refresh-cert.sh
    echo "Certificate ready"
fi