{ stdenv, writeText
, bash
, simp_le
, eject
}:
dir:
domain:

let
  script = writeText "${domain}.sh" ''
    mkdir -p ${dir}
    cd ${dir}
    mkdir -p /root/ssl_archive/$(date +'%Y-%m-%d')-${domain}
    for f in account_key.json cert.pem fullchain.pem key.pem privkey.pem; do
      [[ -e $f ]] && mv $f /root/ssl_archive/$(date +'%Y-%m-%d')-${domain}
    done
    ${simp_le}/bin/simp_le -d ${domain}:/srv/www/acme/${domain}/ \
      --email "phikeebaogobaegh@141.li" \
      -f account_key.json \
      -f cert.pem \
      -f fullchain.pem \
      -f key.pem
    [[ -e key.pem ]] && ln -s -f key.pem privkey.pem
  '';
in
  "${bash}/bin/bash ${script} 2>&1 | ${eject}/bin/logger -p auth.info"