#!/bin/sh

set -e

echo " + Fixing permissions..."

if getent group ssl-cert > /dev/null 2>&1
then
	echo -n "   + /var/lib/dehydrated/certs:"

	find /var/lib/dehydrated/certs -type d -exec chmod 0750 {} \;
	find /var/lib/dehydrated/certs -type f -exec chmod 0640 {} \;

	# https://bugs.debian.org/854431
	chown -R root:ssl-cert /var/lib/dehydrated/certs

	echo " done."
fi