#/bin/bash
set -euo pipefail
FQDN='{{ mail_server_fqdn }}'
cat "/etc/letsencrypt/live/${FQDN}/privkey.pem" "/etc/letsencrypt/live/${FQDN}/fullchain.pem" > /etc/courier/${FQDN}.imapd.pem
chmod 600 "/etc/courier/${FQDN}.imapd.pem"
chown courier.courier "/etc/courier/${FQDN}.imapd.pem"
cp "/etc/letsencrypt/live/${FQDN}/privkey.pem" /etc/postfix/smtpd.key -rfpL
chmod 0600 /etc/postfix/smtpd.key
chown root.courier /etc/postfix/smtpd.key
cp "/etc/letsencrypt/live/${FQDN}/fullchain.pem" /etc/postfix/smtpd.crt -rfpL
chmod 0600 /etc/postfix/smtpd.crt
chown root.courier /etc/postfix/smtpd.crt