#!/bin/sh


read -p "Server reload command on (default apache-reload): " rcmd
rcmd=${rcmd:-"/etc/init.d/apache2 reload"}


mkdir -p /etc/ssl/mycerts/$1

./acme.sh --force  --home "/opt/acme" --config-home '/var/lib/acme'  --issue --standalone  --httpport 9432 -d $1 \
--ca-file      /etc/ssl/mycerts/$1/ca.cer  \
--cert-file      /etc/ssl/mycerts/$1/$1.cer  \
--key-file       /etc/ssl/mycerts/$1/$1.key  \
--fullchain-file /etc/ssl/mycerts/$1/fullchain.cer \
--reloadcmd "${rcmd}"

chmod go-rwx /etc/ssl/mycerts/$1/*.key