From f6185d64436a50dac90a9e756f95ca89546d2d01 Mon Sep 17 00:00:00 2001
From: Jim Hague <jim.hague@acm.org>
Date: Sun, 6 Aug 2023 11:07:16 +0100
Subject: [PATCH] Small certificate hook updates

1. Preserve mode, owndership, timestamps when copying certificates.
   Ownership is updated after copying.
2. Reload dovecot on mail.lunch.org.uk.
---
 states/certificates/dehydrated/hooks/deploy.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/states/certificates/dehydrated/hooks/deploy.sh b/states/certificates/dehydrated/hooks/deploy.sh
index 7d0e2a0..4e41d00 100755
--- a/states/certificates/dehydrated/hooks/deploy.sh
+++ b/states/certificates/dehydrated/hooks/deploy.sh
@@ -7,13 +7,14 @@ action=$1
 shift
 
 deploy_cert() {
-    cp -R /var/lib/dehydrated/certs/* /var/local/certificates/
+    cp -a /var/lib/dehydrated/certs/* /var/local/certificates/
     chown -R root:ssl-cert /var/local/certificates/
 
     DOMAIN="$1"
     case $DOMAIN in
         "mail.lunch.org.uk")
             systemctl restart exim4
+            systemctl reload dovecot
             ;;
     esac
 }