#!/usr/bin/env bash

openssl req -newkey rsa:4096 -nodes -keyout \
	key.pem -x509 -sha256 -days 3650 -subj "/C=IL/ST=CE/L=Center/O=NgTech LTD/OU=IT/CN=gitea.ngtech.home" \
	-addext "subjectAltName = DNS:*.ngtech.home, DNS:localhost, DNS:127.0.0.1" -out cert.pem

cp -vf key.pem /etc/ssl/nginx/key.pem
cp -vf cert.pem /etc/ssl/nginx/cert.pem