add letsencrypt support

data/common.yaml

@@ -1 +1,14 @@
 --- {}
+
+letsencrypt::renew_additional_args:
+  - "--standalone"
+letsencrypt::renew_pre_hook_commands:
+  - "systemctl stop httpd"
+letsencrypt::renew_post_hook_commands:
+  - "systemctl start httpd"
+letsencrypt::certonly_additional_args:
+  - "--standalone"
+letsencrypt::certonly_pre_hook_commands:
+  - "systemctl stop httpd"
+letsencrypt::certonly_post_hook_commands:
+  - "systemctl start httpd"

manifests/init.pp

@@ -24,6 +24,7 @@
   include apache::mod::alias
   include apache::mod::authn_core
   include apache::mod::authz_user
+  include letsencrypt
   include openondemand
 
   include profile_ondemand::xdmod_export
@@ -61,4 +62,15 @@
   $crons.each | $k, $v | {
     cron { $k: * => $v }
   }
+
+  letsencrypt::certonly { $facts['networking']['fqdn']:
+    plugin        => 'webroot',
+    webroot_paths => [
+      "/var/www/ood/public/",
+    ],
+    require       => [
+      Class['apache::service'],
+      Class['openondemand'],
+    ],
+  }
 }