#!/bin/sh

set -e
set -u

if [ "$#" != 1 ]; then
	echo >&2 "Usage: $0 <hostname>"
	exit 1
fi

h="$1"
#echo "Expect svn cert fingerprint to be"
#echo " 66:ab:46:50:ce:21:a5:4a:36:8c:82:0e:77:81:34:d5:53:10:d0:99"
echo
ssh "$h" '(! [ -e .dotfiles ] || ( [ -e .dotfiles/.svn ] && mv .dotfiles .dotfiles-svn ) ) &&
	rm -rf .dotfiles.new &&
	cat > .www.palfrader.org.crt << EOF &&
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
EOF
	git -c http.sslCAinfo="$HOME"/.www.palfrader.org.crt clone https://www.palfrader.org/git/conf/dotfiles.git .dotfiles.new &&
	rm -f .www.palfrader.org.crt &&
	mv .dotfiles.new .dotfiles &&
	cd .dotfiles &&
	git config --local --add http.sslCAinfo "$HOME"/.dotfiles/.certs/www.palfrader.org.crt &&
	./Link-Them &&
	echo "All done"'