#!/bin/bash
set -e

/bin/cp -f /etc/letsencrypt/live/<%= @domain %>/fullchain.pem <%= @cert_file %>
/bin/cp -f /etc/letsencrypt/live/<%= @domain %>/privkey.pem <%= @key_file %>

chown vault:vault <%= @cert_file %> <%= @key_file %>
chmod 600 <%= @cert_file %> <%= @key_file %>

systemctl reload vault