From 0aa2668c7929dfe710315cd553b80fadbac3eaa2 Mon Sep 17 00:00:00 2001
From: Mikaela Suomalainen <mikaela+git@mikaela.info>
Date: Sun, 6 Jun 2021 13:05:59 +0300
Subject: [PATCH] acmesh-ssl.bash: add WeeChat relay

---
 bash/acmesh-ssl.bash | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bash/acmesh-ssl.bash b/bash/acmesh-ssl.bash
index e886ad8..fcec1d8 100755
--- a/bash/acmesh-ssl.bash
+++ b/bash/acmesh-ssl.bash
@@ -21,6 +21,7 @@ MUMBLEDIR=/var/lib/mumble-server/ssl
 ZNCDIR=/home/znc/.znc/ssl
 NGINXDIR=/etc/nginx/ssl
 ORAGONODIR=/home/oragono/oragono-conf
+WEECHATDIR=/home/mikaela/.weechat/ssl
 
 # Where is acme.sh + flags applying to them all
 ACMESH="/root/.acme.sh/acme.sh --install-cert -d $DOMAINNAME"
@@ -30,7 +31,7 @@ SYSTEMCTLRESTART="systemctl restart --quiet"
 SYSTEMCTLRELOAD="systemctl reload --quiet"
 
 # Start by creating the directories if they don't exist
-/bin/mkdir -p $SYNCPLAYDIR $MUMBLEDIR $ZNCDIR $NGINXDIR
+/bin/mkdir -p $SYNCPLAYDIR $MUMBLEDIR $ZNCDIR $NGINXDIR $WEECHATDIR
 
 # Syncplay - note: reloads certs on every connect like ZNC
 $ACMESH --cert-file $SYNCPLAYDIR/cert.pem --key-file $SYNCPLAYDIR/privkey.pem --ca-file $SYNCPLAYDIR/chain.pem
@@ -59,3 +60,8 @@ chown -R root:root $NGINXDIR
 $ACMESH --key-file $ORAGONODIR/privkey.pem --fullchain-file $ORAGONODIR/fullchain.pem --reloadcmd "$SYSTEMCTLRELOAD oragono"
 chmod -R 700 $ORAGONODIR
 chown -R oragono:oragono $ORAGONODIR
+
+$ACMESH --fullchain-file $WEECHATDIR/fullchain.pem --key-file $WEECHATDIR/privkey.pem
+cat $WEECHATDIR/{fullchain,privkey}.pem > $WEECHATDIR/relay.pem
+chmod -R 700 $WEECHATDIR
+chown -R mikaela:mikaela $WEECHATDIR