# vim:syntax=yaml
{%- from "acme/map.jinja" import acme with context %}
---
acmesh-install:
  cmd.run:
    - name: "curl https://get.acme.sh | sh"
    - runas: root
    - cwd: /root
    - env:
      - HOME: /root
    - unless: /bin/bash -c "[[ -f /root/.acme.sh/acme.sh ]]"

acmesh-upgrade:
  cmd.run:
    - name: /root/.acme.sh/acme.sh --upgrade
    - runas: root
    - cwd: /root
    - env:
      - HOME: /root
    - require:
      - cmd: acmesh-install

acmesh-run:
  cmd.run:
    - name: /root/.acme.sh/acme.sh --debug --issue {%- for domain in acme.domains %} -d '{{ domain }}' {% endfor -%} --dns dns_ovh --cert-file '' --fullchain-file '{{ acme.fullcertfile }}' --key-file '{{ acme.keyfile }}' -k {{ acme.keysize }}
    - env:
      - OVH_AK: '{{ acme.provider.api.application_key }}'
      - OVH_AS: '{{ acme.provider.api.application_secret }}'
      - OVH_CK: '{{ acme.provider.api.consumer_key }}'
      - HOME: '/root'
    - success_retcodes:
      - 0
      - 1
      - 2
    - runas: root
    - cwd: /root
    - require:
      - cmd: acmesh-install