modules/certbot/manifests/init.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

class certbot {
  include cron
  include nginx

  package { 'certbot':
    ensure => installed;
  }

  file {
    '/etc/cron.daily/certbot':
      source => 'puppet:///modules/certbot/certbot',
      mode => '0755',
      require => [
        Package['certbot'],
        Class['cron'],
      ];
    '/etc/letsencrypt/renewal-hooks':
      ensure => directory,
      require => Package['certbot'];
    '/etc/letsencrypt/renewal-hooks/deploy':
      ensure => directory,
      require => File['/etc/letsencrypt/renewal-hooks'];
    '/etc/letsencrypt/renewal-hooks/deploy/reload-cert':
      source => 'puppet:///modules/certbot/reload-cert',
      require => File['/etc/letsencrypt/renewal-hooks/deploy'];
  }

  exec { "initial certbot run":
    # XXX update to real domain name
    command => "/usr/bin/certbot --nginx -d new.tozt.net",
    creates => "/etc/letsencrypt/live",
    require => [
      Package["certbot"],
      Package["nginx"],
    ],
  }
}