import io
from tarfile import TarFile

from commia.bearer import get_key, keys
from commia.prelude import *
from commia.ssh import scp, ssh_args
from commia.util import with_written

buffer = get_key(keys.certificates.certs, decode=False)
tar = TarFile(fileobj=io.BytesIO(buffer))
for name in tar.getnames():
    with_written(
        tar.extractfile(name).read(),
        lambda path: scp(path, f"callosum:/etc/tls/{name}"),
    )

run_check(p([*ssh_args("callosum"), "systemctl", "restart", "nginx"]))