#!/usr/bin/env bash

TOP="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1 && pwd)/.."

if [ "x$1" = "x" ]; then
    echo "usage: initca.sh {cluster}"
    exit 1
fi

ca=$TOP/modules/initca.nix

cd $TOP/clusters/$1

echo "--- Preparing CA certificate"
nix-build -o ca $ca

echo "--- Safeguarding CA certificate"
nix-store --add-root $(pwd)/ca --indirect -r $(nix-instantiate --add-root $ca)