#!/usr/bin/env bash
set -euo pipefail

CERT_DIR="$(dirname "$0")/../tmp/tls"
mkdir -p "$CERT_DIR"

echo "Extracting TLS certificates from gopass..."
gopass show tailscale/arch-razer/crt > "$CERT_DIR/cert.pem"
gopass show tailscale/arch-razer/key > "$CERT_DIR/key.pem"
chmod 600 "$CERT_DIR/key.pem"

echo "Certificates written to $CERT_DIR"