#!/bin/sh
set -e

case "$1" in configure)
     chown -R www-data:www-data /usr/lib/yandex/passport-tvm-keyring
     chown -R www-data:www-data /etc/yandex/passport-tvm-keyring

     YA_ENV_TYPE=""
     if [ -f "/etc/yandex/environment.type" ]; then
         YA_ENV_TYPE=`cat /etc/yandex/environment.type`
     fi
     chmod 755 /var/cache/yandex/passport-tvm-keyring
     if [ "$YA_ENV_TYPE" = "development" ]; then
         PERMISSIONS=755
     else
         PERMISSIONS=700
     fi
     chmod $PERMISSIONS /etc/yandex/passport-tvm-keyring/conf-available
     chmod $PERMISSIONS /etc/yandex/passport-tvm-keyring/conf-enabled
     chmod $PERMISSIONS /etc/yandex/passport-tvm-keyring/secrets

     passport-tvm-keyring update -v

     chown -R www-data:www-data /var/log/yandex/passport-tvm-keyring
     chown -R www-data:www-data /var/cache/yandex/passport-tvm-keyring
     ;;
esac

#DEBHELPER#

exit 0
