From 5443a2aa3aa230dc9ac5e68a4b3217837defdb91 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sun, 9 Jul 2023 21:14:54 -0400
Subject: [PATCH] improve certbot-replicate error handling

---
 certbot-replicate | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/certbot-replicate b/certbot-replicate
index d58189cb..42fd9eb2 100755
--- a/certbot-replicate
+++ b/certbot-replicate
@@ -2,6 +2,7 @@
 
 set -o errexit -o nounset -o pipefail
 
+status=0
 replicas=({1..3}.grapheneos.org)
 
 for replica in ${replicas[@]}; do
@@ -9,7 +10,10 @@ for replica in ${replicas[@]}; do
     echo Deploying to $replica
     echo
 
-    rsync -rptvl --fsync --delete /etc/letsencrypt/ $replica:/etc/letsencrypt
-    rsync -rptvl --fsync --delete /var/cache/certbot-ocsp-fetcher/ $replica:/var/cache/certbot-ocsp-fetcher
-    ssh root@$replica nginx -s reload
+    rsync -rptvl --fsync --delete /etc/letsencrypt/ $replica:/etc/letsencrypt &&
+        rsync -rptvl --fsync --delete /var/cache/certbot-ocsp-fetcher/ $replica:/var/cache/certbot-ocsp-fetcher &&
+        ssh root@$replica nginx -s reload ||
+        status=1
 done
+
+exit $status