#!/bin/sh
#
# Renew letsencrypt certificates

set -eu

# update certdomain certs
letsencrypt.sh --cron

# update non-EC maildomain cert if resolvable and not clashing with certdomain
maildomain=$(cat /etc/local-REDPILL/$(cat /etc/local-ORG/realm)/mailhost)
[ -z "$maildomain" ] \
	|| grep ^"$maildomain" /etc/letsencrypt.sh/domains.txt \
	|| letsencrypt.sh --cron --domain "$maildomain" --algo rsa