.PHONY: reissue-certs

packer-manifest.json: freshrss.json \
                      scripts/dependencies.sh \
                      files/freshrss.timer \
                      files/freshrss.service \
                      scripts/freshrss.sh \
                      files/freshrss-nginx.conf \
                      scripts/nginx.sh \
                      certbot/live/rss.jeremydormitzer.com/fullchain.pem \
		      certbot/live/rss.jeremydormitzer.com/privkey.pem
	packer build freshrss.json

certbot/live/rss.jeremydormitzer.com/fullchain.pem certbot/live/rss.jeremydormitzer.com/privkey.pem &: tmp/do.ini
	certbot certonly -n \
                         --agree-tos \
                         --email ${CERTBOT_EMAIL} \
                         --dns-digitalocean \
                         --dns-digitalocean-credentials tmp/do.ini \
                         --config-dir ./certbot \
                         --work-dir ./certbot \
                         --logs-dir ./certbot \
                         -d rss.jeremydormitzer.com


tmp/do.ini: templates/do.ini.template tmp
	sigil -p -f templates/do.ini.template > tmp/do.ini
	chmod 600 tmp/do.ini

tmp:
	mkdir tmp

reissue-certs:
	rm -rf certbot
	make