#!/usr/bin/env bash
set -euo pipefail
cd "$(dirname "$0")"

echo "=== VPN Install: vpn.yyamashita.com ==="

if [ ! -f users.conf ]; then
    echo ""
    echo "Error: users.conf が見つかりません。先に作成してください:"
    echo "  echo 'username password' > /app/infra/vpn/users.conf"
    echo "  chmod 600 /app/infra/vpn/users.conf"
    exit 1
fi

bash "$(pwd)/renew-cert.sh"

echo ""
echo "=== VPN 起動完了 ==="
echo "  サーバー: vpn.yyamashita.com"
echo "  認証:     IKEv2 EAP (ユーザー名/パスワード)"
echo "  証明書の更新: bash /app/infra/vpn/renew-cert.sh"