## cd_nagios::certbot::certs.pp
# Module name: cd_nagios
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary  Class manages all configuration files required for cd_nagios.
##############################################################################
class cd_nagios::certbot::certs (

) inherits cd_nagios::params {
  if $::fqdn == $ng_nagios_server {
    if $ng_use_https == true {
      if $ng_enable_certbot == true {
        require cd_certbot
        require cd_apache

        if $ng_include_fw == true {
          require cd_nagios::firewall::iptables
        }

        # create cert

        exec { 'create_cert':
          command  => template($ng_get_cert_erb),
          cwd      => '/tmp',
          path     => ['/bin','/usr/bin'],
          provider => 'shell',
          unless   => template('cd_nagios/certbot/unless_get_cert.erb'),
          notify   => Service['httpd'],
          creates  => $ng_certbot_check,
        }

        # renew certs

        exec { 'renew_cert':
          command  => 'certbot renew',
          cwd      => '/tmp',
          path     => ['/bin','/usr/bin','/opt/'],
          provider => 'shell',
          notify   => Service['httpd'],
          unless   => template($ng_unless_renew_erb),
        }
      }
    }

    else {
      # do nothing as we are not using https and certbot is not required then
    }
  }
}