Change declared domains to deferred resources.

Defer + realise beside each other should look indentical to direct
resources from the outside, with the difference that someone else
can create a deferred and conflicting resource, and it would still work.

1 files changed, 4 insertions, 2 deletions

diff --git a/manifests/cert.pp b/manifests/cert.pp
index 13e1c82..27a3586 100644
--- a/manifests/cert.pp
+++ b/manifests/cert.pp
@@ -46,16 +46,18 @@ define letsencrypt::cert (
   }
 
   $domains.each |$domain| {
-    letsencrypt::domain { $domain:
+    @letsencrypt::domain { $domain:
       cert_name => $cert_name,
     }
   }
   if $include_self and ! $cert_name in $domains {
-    letsencrypt::domain { $cert_name:
+    @letsencrypt::domain { $cert_name:
       cert_name => $cert_name,
     }
   }
 
+  Letsencrypt::Domain <| cert_name == $cert_name |>
+
   letsencrypt::renew { $cert_name:
   }