#!/bin/sh

set -eu

file="$1"

case "$file" in
	*.zone.sig) ;;

	# Ignore everything else
	*) exit 0 ;;
esac

zone=${file%*.sig}

[ -f "$file" ] || exit 1
[ -f "$zone" ] || exit 2
gpgv --keyring $HOME/trustedkeys.kbx "$file" "$zone" || exit 3
cp -t /var/lib/knot "$zone" || exit 4
sudo -u knot knotc zone-reload "$(basename "${zone%*.zone*}")"