# Sets up a certificate for this machine.
# Should preferably be included before a letsencrypt::domain resource
# is declared.
class profiles::certificate (
  String $cert_name = $trusted['certname'],
  Letsencrypt::Authenticator $authenticator = 'nginx',
  Hash[String,Any] $config = {
    # more portable than 'systemctl reload nginx'
    'post-hook' => 'nginx -s reload',
  },
  Array[String] $default_domains = [ $trusted['certname'], ],
) {
  include ::letsencrypt

  letsencrypt::cert { $cert_name:
    domains       => $default_domains,
    authenticator => $authenticator,
    config        => $config,
  }
}