#!/bin/sh

if [ ! -f "/config/vpn-cert.pem" ]; then
    echo "Missing VPN server cert at '/config/vpn-cert.pem'"
    exit 1
fi
cp /config/vpn-cert.pem /etc/ipsec.d/certs/vpn.pem
chmod 444 /etc/ipsec.d/certs/vpn.pem

if [ ! -f "/config/vpn-key.pem" ]; then
    echo "Missing VPN server key at '/config/vpn-key.pem'"
    exit 1
fi
cp /config/vpn-key.pem /etc/ipsec.d/private/vpn.pem
chmod 400 /etc/ipsec.d/private/vpn.pem

if [ ! -f "/config/ipsec.conf" ]; then
    echo "Missing VPN server config at '/config/ipsec.conf'"
    exit 1
fi
cp /config/ipsec.conf /etc/ipsec.conf
chmod 444 /etc/ipsec.conf

exec "$@"