#!/bin/bash
set -euo pipefail

install -m 0644 "${CERT_FILE}" /etc/caddy/server_cert.pem
install -m 0640 -g caddy "${KEY_FILE}" /etc/caddy/server_key.pem
systemctl reload-or-restart caddy.service