#!/usr/bin/env bash

RENEW=false

while getopts r: flag
do
  case "${flag}" in
    r) RENEW=true
  esac
done

HOSTNAME=$1 

if [[ -f "$HOSTNAME.key.pem" && renew == 'false' ]]; then
  echo "Certificate key for $HOSTNAME exists, use -r to renew it."
  exit
fi 

consul tls cert create -server -dc dc1 -additional-dnsname=$HOSTNAME -node=$HOSTNAME 
mv dc1-server-consul-0-key.pem $HOSTNAME.key.pem 
mv dc1-server-consul-0.pem $HOSTNAME.pem