#!/bin/bash
set -euo pipefail
python3 - <<'PY'
from pathlib import Path
p = Path('/etc/caddy/sites/qsafe-lan.caddy')
t = p.read_text()
start = t.find('\t# BEGIN QSafe QA\n')
endmarker = '\t# END QSafe QA\n'
end = t.find(endmarker, start)
if start >= 0 and end >= 0:
    p.write_text(t[:start] + t[end + len(endmarker):])
PY
caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile >/dev/null
systemctl reload caddy
systemctl stop qsafe-qa
rm -f /etc/qsafe/qa-token.sha256