#!/usr/bin/env bash
set -euo pipefail

cd /home/xsl/product
mkdir -p certs

openssl req -x509 -nodes -newkey rsa:2048 -days 365 \
  -keyout certs/dev-key.pem \
  -out certs/dev-cert.pem \
  -subj "/C=CN/ST=Local/L=Local/O=VisualChat/OU=Dev/CN=localhost"

echo "Generated:"
echo "  /home/xsl/product/certs/dev-cert.pem"
echo "  /home/xsl/product/certs/dev-key.pem"
echo "Set SSL_CERTFILE and SSL_KEYFILE in .env to enable HTTPS."