#!/bin/bash
set -euo pipefail
NPM_HOST="192.168.2.101"
NPM_USER="root"
REMOTE_DIR="/etc/letsencrypt/live/npm-7"
LOCAL_DIR="/etc/gitlab/ssl"
rsync -az -e ssh $NPM_USER@$NPM_HOST:$REMOTE_DIR/fullchain.pem /tmp/fullchain.pem
rsync -az -e ssh $NPM_USER@$NPM_HOST:$REMOTE_DIR/privkey.pem /tmp/privkey.pem

[[ -s /tmp/fullchain.pem && -s /tmp/privkey.pem ]] || {
echo "Missing or empty cert files"; exit 1;
}

sudo mv /tmp/fullchain.pem /tmp/privkey.pem $LOCAL_DIR/