#!/usr/bin/env bash
set -euo pipefail

if [[ ${EUID} -ne 0 ]]; then
    echo "Execute com sudo: sudo /var/www/dgois.com.br/config/install-local-ssl.sh" >&2
    exit 1
fi

site_root='/var/www/dgois.com.br'
ssl_source="$site_root/storage/ssl"
vhost_source="$site_root/config/dgois.com.br.conf"

test -f "$ssl_source/dgois-local-ca.crt"
test -f "$ssl_source/www.dgois.com.br.crt"
test -f "$ssl_source/www.dgois.com.br.key"
test -f "$vhost_source"

a2enmod ssl headers rewrite deflate

install -o root -g root -m 0644 \
    "$ssl_source/dgois-local-ca.crt" \
    /usr/local/share/ca-certificates/dgois-local-ca.crt
install -o root -g root -m 0644 \
    "$ssl_source/www.dgois.com.br.crt" \
    /etc/ssl/certs/dgois-local.crt
install -o root -g www-data -m 0640 \
    "$ssl_source/www.dgois.com.br.key" \
    /etc/ssl/private/dgois-local.key

update-ca-certificates

install -o root -g root -m 0644 \
    "$vhost_source" \
    /etc/apache2/sites-available/dgois.com.br.conf
a2ensite dgois.com.br.conf

apache2ctl configtest
systemctl reload apache2

echo "SSL local instalado. Feche e reabra o navegador antes de testar https://www.dgois.com.br/."