From 6c2c73fb3304da6f35c7390b4a952bb7f51a4d5d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hugo=20H=C3=B6rnquist?= <hugo@lysator.liu.se>
Date: Tue, 10 Jan 2023 12:57:19 +0100
Subject: Introduce profiles::certificates + repomaster work.

---
 manifests/certificate.pp | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 manifests/certificate.pp

(limited to 'manifests/certificate.pp')

diff --git a/manifests/certificate.pp b/manifests/certificate.pp
new file mode 100644
index 0000000..829ae37
--- /dev/null
+++ b/manifests/certificate.pp
@@ -0,0 +1,19 @@
+# Sets up a certificate for this machine.
+# Should preferably be included before a letsencrypt::domain resource
+# is declared.
+class profiles::certificate (
+  String $cert_name = $::fqdn,
+  Letsencrypt::Authenticator $authenticator = 'nginx',
+  Hash[String,Any] $config = {
+    # more portable than 'systemctl reload nginx'
+    'post-hook' => 'nginx -s reload',
+  },
+) {
+  include ::letsencrypt
+
+  letsencrypt::cert { $cert_name:
+    domains       => [ $::fqdn, ],
+    authenticator => $authenticator,
+    config        => $config,
+  }
+}
-- 
cgit v1.2.3