#!/usr/bin/env bash
set -euo pipefail

CERT_DIR="${1:-./traefik/certs}"
HOSTNAME="${2:-localhost}"

mkdir -p "${CERT_DIR}"

openssl req -x509 -nodes -newkey rsa:2048 \
  -keyout "${CERT_DIR}/traefik.key" \
  -out "${CERT_DIR}/traefik.crt" \
  -days 365 \
  -subj "/CN=${HOSTNAME}"

echo "Generated certs in ${CERT_DIR} for CN=${HOSTNAME}"