.PHONY: all

VAULT_TLS=/srv/certs/vault
ACME_DIR=/srv/certs/acme
DOMAIN=monotremata.xyz

CERT_PATH=$(ACME_DIR)/$(DOMAIN)
CERT=$(CERT_PATH)/$(DOMAIN).cer
KEY=$(CERT_PATH)/$(DOMAIN).key

VAULT_CERT=$(VAULT_TLS)/tls.crt
VAULT_KEY=$(VAULT_TLS)/tls.key

all: $(VAULT_CERT) $(VAULT_KEY)

$(VAULT_CERT): $(CERT)
	mkdir -p $(@D)
	install -o vault -g vault -m 600 $^ $@

$(VAULT_KEY): $(KEY)
	mkdir -p $(@D)
	install -o vault -g vault -m 600 $^ $@