#!/bin/bash

mkdir -p /home/letsencrypt
echo dns_cloudflare_email=$CLOUDFLARE_EMAIL > /home/letsencrypt/cloudflare.ini
echo dns_cloudflare_api_key=$CLOUDFLARE_API_KEY >> /home/letsencrypt/cloudflare.ini

chmod 600 /home/letsencrypt/cloudflare.ini

certbot certonly \
--dns-cloudflare \
--dns-cloudflare-credentials /home/letsencrypt/cloudflare.ini \
--email $CLOUDFLARE_EMAIL \
--agree-tos \
--no-eff-email \
-d $DOMAIN