From 90e587a9742569f2ba0752ac2d18a553869c05a4 Mon Sep 17 00:00:00 2001
From: Bob Belnap <robert.belnap@uga.edu>
Date: Thu, 15 Feb 2018 15:34:47 -0500
Subject: [PATCH 1/4] add vault deploy hook script

---
 deploy/vault.sh | 59 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 deploy/vault.sh

diff --git a/deploy/vault.sh b/deploy/vault.sh
new file mode 100644
index 00000000..b95d8af5
--- /dev/null
+++ b/deploy/vault.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env sh
+
+# Here is a script to deploy cert to hashicorp vault
+# (https://www.vaultproject.io/)
+# 
+# it requires the vault binary to be available in PATH, and the following
+# environment variables:
+# 
+# VAULT_PREFIX - this contains the prefix path in vault
+# VAULT_ADDR - vault requires this to find your vault server
+#
+# additionally, you need to ensure that VAULT_TOKEN is avialable or
+# `vault auth` has applied the appropriate authorization for the vault binary
+# to access the vault server
+
+#returns 0 means success, otherwise error.
+
+########  Public functions #####################
+
+#domain keyfile certfile cafile fullchain
+vault_deploy() {
+
+  _cdomain="$1"
+  _ckey="$2"
+  _ccert="$3"
+  _cca="$4"
+  _cfullchain="$5"
+
+  _debug _cdomain "$_cdomain"
+  _debug _ckey "$_ckey"
+  _debug _ccert "$_ccert"
+  _debug _cca "$_cca"
+  _debug _cfullchain "$_cfullchain"
+
+  # validate required env vars
+  if [ -z "$VAULT_PREFIX" ]
+  then
+    _err "VAULT_PREFIX needs to be defined (contains prefix path in vault)"
+    return 1
+  fi
+
+  if [ -z "$VAULT_ADDR" ]
+  then
+    _err "VAULT_ADDR needs to be defined (contains vault connection address)"
+    return 1
+  fi
+
+  VAULT_CMD=$(which vault)
+  if [ ! $?  ]
+  then
+    _err "cannot find vault binary!"
+    return 1
+  fi
+
+  $VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/cert.pem" value=@"$_ccert" || return 1
+  $VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/cert.key" value=@"$_ckey" || return 1
+  $VAULT_CMD write "${VAULT_PREFIX}/${_cdomain}/fullchain.pem" value=@"$_cfullchain" || return 1
+
+}

From b8418ced44167f1923354ff34441a58ddcef0d88 Mon Sep 17 00:00:00 2001
From: Bob Belnap <robert.belnap@uga.edu>
Date: Fri, 16 Feb 2018 09:01:26 -0500
Subject: [PATCH 2/4] syntax fixes

---
 deploy/vault.sh | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/deploy/vault.sh b/deploy/vault.sh
index b95d8af5..8a6c55be 100644
--- a/deploy/vault.sh
+++ b/deploy/vault.sh
@@ -33,21 +33,18 @@ vault_deploy() {
   _debug _cfullchain "$_cfullchain"
 
   # validate required env vars
-  if [ -z "$VAULT_PREFIX" ]
-  then
+  if [ -z "$VAULT_PREFIX" ]; then
     _err "VAULT_PREFIX needs to be defined (contains prefix path in vault)"
     return 1
   fi
 
-  if [ -z "$VAULT_ADDR" ]
-  then
+  if [ -z "$VAULT_ADDR" ]; then
     _err "VAULT_ADDR needs to be defined (contains vault connection address)"
     return 1
   fi
 
   VAULT_CMD=$(which vault)
-  if [ ! $?  ]
-  then
+  if [ ! $?  ]; then
     _err "cannot find vault binary!"
     return 1
   fi

From c86755f1ab80e0de9c238e266bdd05137b366000 Mon Sep 17 00:00:00 2001
From: Bob Belnap <robert.belnap@uga.edu>
Date: Fri, 16 Feb 2018 09:19:47 -0500
Subject: [PATCH 3/4] format fix

---
 deploy/vault.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy/vault.sh b/deploy/vault.sh
index 8a6c55be..7b91ec51 100644
--- a/deploy/vault.sh
+++ b/deploy/vault.sh
@@ -44,7 +44,7 @@ vault_deploy() {
   fi
 
   VAULT_CMD=$(which vault)
-  if [ ! $?  ]; then
+  if [ ! $? ]; then
     _err "cannot find vault binary!"
     return 1
   fi

From 2c45f27356de74567ecd2fcc82842e9a8863ccc3 Mon Sep 17 00:00:00 2001
From: Bob Belnap <robert.belnap@uga.edu>
Date: Tue, 20 Feb 2018 09:11:45 -0500
Subject: [PATCH 4/4] rename deploy hook vault to vault_cli

---
 deploy/{vault.sh => vault_cli.sh} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename deploy/{vault.sh => vault_cli.sh} (98%)

diff --git a/deploy/vault.sh b/deploy/vault_cli.sh
similarity index 98%
rename from deploy/vault.sh
rename to deploy/vault_cli.sh
index 7b91ec51..02617c5e 100644
--- a/deploy/vault.sh
+++ b/deploy/vault_cli.sh
@@ -18,7 +18,7 @@
 ########  Public functions #####################
 
 #domain keyfile certfile cafile fullchain
-vault_deploy() {
+vault_cli_deploy() {
 
   _cdomain="$1"
   _ckey="$2"