#!/usr/bin/env bash
# shellcheck disable=SC2046
dir=${0%/*}
set -eux
host=$1

nebula-cert keygen -out-key "$dir/$host".key -out-pub "$dir/$host".pub
gpg --encrypt $(printf '-r %s' $(cat hosts/"$host"/.gpg-id)) \
  -o hosts/"$host"/nebula/sourcephile.fr/"$host".key.gpg \
  "$dir/$host".key
shred -fu "$dir/$host".key