#!/usr/bin/bash

# Restart on change:
#31 2 * * * acme /usr/libexec/acme-tiny/sign 21
#50 2 * * * root [ "`find /var/lib/acme/certs -type f -mmin -60`" ] && /etc/init.d/httpd reload

if [ -z "$1" ]; then
  echo "$0 domain"
  exit
fi

DOMAIN="$1"

openssl req -new -nodes \
  -keyout /etc/pki/httpd/"$DOMAIN".key \
  -out /var/lib/acme/csr/"$DOMAIN".csr

su - acme -s /bin/bash -c /usr/libexec/acme-tiny/sign

cat << EOF
Apache httpd configuration:
<VirtualHost *:443>
	ServerName $DOMAIN
	SSLEngine on
	SSLCertificateKeyFile /etc/pki/httpd/$DOMAIN.key
	SSLCertificateFile /var/lib/acme/certs/$DOMAIN.crt
</VirtualHost>
EOF

ls -la /var/lib/acme/certs/"$DOMAIN".crt
