#!/bin/bash -e

#
# Install software so that this machine can do the lets encrypt thing.
#

eval "$(cli-shezargs $@)"

[[ -n $sub_domain ]] || die "Must have --sub-domain="
[[ -n $domain     ]] || die "Must have --domain="

sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common
sudo DEBIAN_FRONTEND=noninteractive add-apt-repository -y ppa:certbot/certbot
sudo DEBIAN_FRONTEND=noninteractive apt-get update
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y certbot

sudo mkdir -p /etc/letsencrypt/

sudo mkdir -p /etc/nginx/certs
sudo aws s3 cp s3://mobilewebprint-deploy/buildout/config/certs/serverassist_client_ca.crt /etc/nginx/certs/

mkdir -p ~/www/${sub_domain}