#!/bin/bash

H_NAME=$( hostname -f )
LE_SERVICES_SCRIPT_DIR=/usr/lib/acme/hooks
LE_CERTS_DIR=/var/lib/acme/live/$H_NAME
LE_LOG_DIR=/var/log/letsencrypt
FREERADIUS_CERTDIR={{ freeradius_pki_directory }}
FREERADIUS_KEYFILE=$FREERADIUS_CERTDIR/privkey
DATE=$( date )

[ ! -d $FREERADIUS_CERTDIR ] && mkdir -p $FREERADIUS_CERTDIR
[ ! -d $LE_LOG_DIR ] && mkdir $LE_LOG_DIR
echo "$DATE" >> $LE_LOG_DIR/freeradius.log

if [ -f /etc/default/letsencrypt ] ; then
    . /etc/default/letsencrypt
else
    echo "No letsencrypt default file" >> $LE_LOG_DIR/freeradius.log
fi

echo "Copy the key file" >> $LE_LOG_DIR/freeradius.log
cp ${LE_CERTS_DIR}/privkey  ${FREERADIUS_KEYFILE}
chmod 440 ${FREERADIUS_KEYFILE}
chown root:freerad ${FREERADIUS_KEYFILE}

echo "Restart the freeradius service" >> $LE_LOG_DIR/freeradius.log
if [ -x /bin/systemctl ] ; then
    systemctl restart freeradius >> $LE_LOG_DIR/freeradius.log 2>&1
fi

echo "Done." >> $LE_LOG_DIR/freeradius.log

exit 0