.PHONY: setup-tls

DOMAIN ::= website.com

setup-tls: tls/cert.pem

tls/cert.pem: tls/key.pem
	openssl req -x509 -new -key $< -out $@ -noenc -days 365 \
		-addext 'subjectAltName=DNS:sub.a.$(DOMAIN),DNS:a.$(DOMAIN),DNS:b.$(DOMAIN)' \
		-subj '/CN=$(DOMAIN)'

tls/key.pem: tls/
	openssl genpkey -out $@ -algorithm RSA -pkeyopt bits:4096

tls/:
	mkdir $@