manifests/certificate.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

# Sets up a certificate for this machine.
# Should preferably be included before a letsencrypt::domain resource
# is declared.
class profiles::certificate (
  String $cert_name = $trusted['hostname'],
  Letsencrypt::Authenticator $authenticator = 'nginx',
  Hash[String,Any] $config = {
    # more portable than 'systemctl reload nginx'
    'post-hook' => 'nginx -s reload',
  },
) {
  include ::letsencrypt

  letsencrypt::cert { $cert_name:
    domains       => [ $trusted['hostname'], ],
    authenticator => $authenticator,
    config        => $config,
  }
}