modules/certbot/manifests/init.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

class certbot {
  include cron

  package { 'certbot':
    ensure => installed;
  }

  file {
    '/etc/cron.daily/certbot':
      source => 'puppet:///modules/certbot/certbot',
      mode => '0755',
      require => [
        Package['certbot'],
        Class['cron'],
      ];
    '/etc/letsencrypt/renewal-hooks':
      ensure => directory,
      require => Package['certbot'];
    '/etc/letsencrypt/renewal-hooks/deploy':
      ensure => directory,
      require => File['/etc/letsencrypt/renewal-hooks'];
    '/etc/letsencrypt/renewal-hooks/deploy/reload-cert':
      source => 'puppet:///modules/certbot/reload-cert',
      require => File['/etc/letsencrypt/renewal-hooks/deploy'];
  }

  exec { "initial certbot run":
    # XXX update to real domain name
    command => "certbot certonly --webroot -w /home/doy/public_html -d new.tozt.net",
    creates => "/etc/letsencrypt/live",
    require => Package["certbot"],
  }
}