#!/bin/bash
set -e

docker run --rm \
  -v ota_certbot_letsencrypt:/etc/letsencrypt \
  -v ota_certbot_www:/var/www/certbot \
  certbot/certbot renew --webroot -w /var/www/certbot --quiet

changed=0
for sub in ota-prod ota-preprod ota-omnex-cli ota-omnex-admin ota-mobile-prod ota-mobile-preprod; do
  domain="${sub}.uber-stup.club"
  if ! docker run --rm -v ota_certbot_letsencrypt:/etc/letsencrypt -v /opt/ota/certs:/out alpine \
      sh -c "cmp -s /etc/letsencrypt/live/${domain}/fullchain.pem /out/${domain}.crt"; then
    docker run --rm -v ota_certbot_letsencrypt:/etc/letsencrypt -v /opt/ota/certs:/out alpine sh -c \
      "cp /etc/letsencrypt/live/${domain}/fullchain.pem /out/${domain}.crt && cp /etc/letsencrypt/live/${domain}/privkey.pem /out/${domain}.key"
    changed=1
  fi
done

if [ "$changed" = "1" ]; then
  cd /opt/ota && docker compose up -d --force-recreate nginx
fi