# Sets up a certificate for this machine.
# Should preferably be included before a letsencrypt::domain resource
# is declared.
class profiles::certificate (
  String $cert_name = $::fqdn,
  Letsencrypt::Authenticator $authenticator = 'nginx',
  Hash[String,Any] $config = {
    # more portable than 'systemctl reload nginx'
    'post-hook' => 'nginx -s reload',
  },
) {
  include ::letsencrypt

  letsencrypt::cert { $cert_name:
    domains       => [ $::fqdn, ],
    authenticator => $authenticator,
    config        => $config,
  }
}