#!/bin/bash -e

# Writes Aiven CA to disk when DB_SSL_CA is set (e.g. Render secret file / env).
if [ -z "${DB_SSL_CA:-}" ]; then
  exit 0
fi

mkdir -p config/certs
printf '%s\n' "$DB_SSL_CA" > config/certs/aiven-ca.pem
export DB_SSL_CA_PATH="${DB_SSL_CA_PATH:-config/certs/aiven-ca.pem}"