package fetchcert

import "du5t1n.me/cfg/base/schema/instructions"

templates: [...instructions.#RenderInstruction] & [
	{
		template: "fetchcert/ca.crt"
		dest:     "/etc/fetchcert/ca.crt"
	},
	{
		template: "fetchcert/token"
		dest:     "/etc/fetchcert/token"
	},
	{
		template: "fetchcert/postupdate.sh"
		dest:     "/etc/fetchcert/postupdate.sh"
		mode:     "u=rwx,go=rx"
	},
	{
		template: "fetchcert/fetchcert.container"
		dest:     "/etc/containers/systemd/fetchcert.container"
		hooks: {
			changed: [
				{run: "systemctl daemon-reload", immediate: true},
			]
		}
	},
	{
		template: "fetchcert/fetchcert.timer"
		dest:     "/etc/systemd/system/fetchcert.timer"
		hooks: {
			changed: [
				{run: "systemctl daemon-reload", immediate: true},
				{run: "systemctl enable fetchcert.timer"},
				{run: "systemctl start fetchcert.timer"},
			]
		}
	},
]