node 'hornquist.se' {

  include ::profiles::common
  include ::profiles::client

  include ::profiles::firewall

  include ::nginx

  # https://buddy.works/blog/how-deploy-projects-with-git
  include ::blog

  nsupdate { 'hornquist.se':
    ensure     => present,
    nameserver => 'ns2.adrift.space',
    iface      => 'eth0',
    records    => [
      { type => 'A', ttl => 3600, domain => 'hornquist.se' },
      { type => 'A', ttl => 3600, domain => '*.hornquist.se' },
    ],
  }

  service { 'php7.4-fpm':
    ensure => running,
    enable => true,
  }

  service { 'fcgiwrap.socket':
    ensure => running,
    enable => true,
  }

  file { '/etc/systemd/system/php7.4-fpm.service.d':
    ensure => directory,
  }

  file { '/etc/systemd/system/php7.4-fpm.service.d/override.conf':
    ensure => file,
    notify => Service['php7.4-fpm'],
    content => @(EOF)
    [Service]
    RuntimeDirectory=php
    | EOF
  }

  include ::profiles::letsencrypt



  nginx::resource::location { '= /':
    # temprory redirect
    location_custom_cfg => { return => '307 /hugo' },
    ssl => true,
    index_files => [],
    server => [ 'blog', ],
  }
}

node default {}