#!/bin/bash

set -e

trap exit INT TERM

DominioExtra="webapp1.dominio.com"
EmailExtra="sysadmin.dominio.com"

domain="$DominioExtra"

if [ -d "/etc/letsencrypt/live/$domain" ]; then
echo "El directorio para certificados Let's Encrypt del $domain ya existe"
exit 0
fi

echo "Creando el directorio certbot para $domain";
mkdir -p /var/www/certbot/$domain;
echo "crea los subdirectorios de $domain para los acme-challenges";
mkdir -p /var/www/certbot/$domain/.well-known/acme-challenge;

email="${EmailExtra}"
if [ -z "$email" ]; then
email_arg="--register-unsafely-without-email"
echo "Obteniendo el certificado para $domain sin email"
else
email_arg="--email $email"
echo "Obteniendo el certificado para $domain con email $email"
fi

certbot certonly \
--webroot \
-w "/var/www/certbot/$domain" \
-d "$domain" \
$test_cert_arg \
$email_arg \
--rsa-key-size "${CERTBOT_RSA_KEY_SIZE:-4096}" \
--agree-tos \
--noninteractive \
--verbose || true