- moved certbot into its own module - added fact to list available certificates - created systemd timer to rsync data to $data_dir/pub - ensure the $data_dir/pub exists - manage selinux for nginx
16 lines
426 B
Puppet
16 lines
426 B
Puppet
# certbot::cert
|
|
define certbot::cert (
|
|
Stdlib::Fqdn $domain,
|
|
Array $additional_args = ['--http-01-port=8888'],
|
|
Boolean $manage_cron = true,
|
|
) {
|
|
|
|
$location_environment = "${facts['country']}-${facts['region']}-${facts['environment']}"
|
|
|
|
@@letsencrypt::certonly { $domain:
|
|
additional_args => $additional_args,
|
|
manage_cron => $manage_cron,
|
|
tag => $location_environment,
|
|
}
|
|
}
|