Introduce profiles::certificates + repomaster work.

1 files changed, 19 insertions, 0 deletions

diff --git a/manifests/certificate.pp b/manifests/certificate.pp
new file mode 100644
index 0000000..829ae37
--- /dev/null
+++ b/manifests/certificate.pp
@@ -0,0 +1,19 @@
+# Sets up a certificate for this machine.
+# Should preferably be included before a letsencrypt::domain resource
+# is declared.
+class profiles::certificate (
+  String $cert_name = $::fqdn,
+  Letsencrypt::Authenticator $authenticator = 'nginx',
+  Hash[String,Any] $config = {
+    # more portable than 'systemctl reload nginx'
+    'post-hook' => 'nginx -s reload',
+  },
+) {
+  include ::letsencrypt
+
+  letsencrypt::cert { $cert_name:
+    domains       => [ $::fqdn, ],
+    authenticator => $authenticator,
+    config        => $config,
+  }
+}