#!/bin/bash

set -o errexit -o nounset -o pipefail

status=0

for mirror in $(cat /etc/mirrors); do
    echo
    echo Deploying to $mirror
    echo

    rsync -acv --delete --fsync --preallocate /etc/letsencrypt/ $mirror:/etc/letsencrypt &&
        ssh root@$mirror "systemctl is-active --quiet nginx.service && nginx -s reload; systemctl is-active --quiet dnsdist.service && dnsdist -c -e 'reloadAllCertificates()'" ||
        status=1
done

exit $status